2021-03-19 19:03:25 +00:00
|
|
|
# Title: Phishing URL Snort3 Ruleset
|
2022-01-29 00:01:47 +00:00
|
|
|
# Updated: Sat, 29 Jan 2022 00:01:43 +0000
|
2021-03-19 19:03:25 +00:00
|
|
|
# Expires: 1 day (update frequency)
|
|
|
|
|
# Homepage: https://gitlab.com/curben/phishing-filter
|
|
|
|
|
# License: https://gitlab.com/curben/phishing-filter#license
|
|
|
|
|
# Source: https://www.phishtank.com/ & https://openphish.com/
|
2021-04-02 12:06:43 +00:00
|
|
|
|
|
|
|
|
# Notice: https://curben.gitlab.io/phishing-filter-mirror is moved to https://curben.gitlab.io/malware-filter
|
2022-01-29 00:01:47 +00:00
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0000eueueyiionosserverndjn.weebly.com",nocase; classtype:attempted-recon; sid:200000001; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"00i1.xyz",nocase; classtype:attempted-recon; sid:200000002; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"01.yfziy.com",nocase; classtype:attempted-recon; sid:200000003; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"02-billing-support.org",nocase; classtype:attempted-recon; sid:200000004; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"08863299.sso-secure-mail0454etr.pages.dev",nocase; classtype:attempted-recon; sid:200000005; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"103.109.101.72",nocase; classtype:attempted-recon; sid:200000006; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"103.114.16.4",nocase; classtype:attempted-recon; sid:200000007; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.173.244",nocase; classtype:attempted-recon; sid:200000008; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.173.248",nocase; classtype:attempted-recon; sid:200000009; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.174.44",nocase; classtype:attempted-recon; sid:200000010; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"107.172.198.119",nocase; classtype:attempted-recon; sid:200000011; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"109edc5b.ssdtfgyb09.pages.dev",nocase; classtype:attempted-recon; sid:200000012; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"112358400702021.biz.id",nocase; classtype:attempted-recon; sid:200000013; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"113.164.17.147",nocase; classtype:attempted-recon; sid:200000014; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1157.cf",nocase; classtype:attempted-recon; sid:200000015; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"12coxcommunication.weebly.com",nocase; classtype:attempted-recon; sid:200000016; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"130.211.30.154",nocase; classtype:attempted-recon; sid:200000017; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14.98.234.77",nocase; classtype:attempted-recon; sid:200000018; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"146.185.239.4",nocase; classtype:attempted-recon; sid:200000019; rev:1;)
|
2022-01-28 00:01:46 +00:00
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149-210-143-165.colo.transip.net",nocase; classtype:attempted-recon; sid:200000020; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149.210.143.165",nocase; classtype:attempted-recon; sid:200000021; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15004083383734.data-store-company.com",nocase; classtype:attempted-recon; sid:200000022; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"153in.net",nocase; classtype:attempted-recon; sid:200000023; rev:1;)
|
2022-01-29 00:01:47 +00:00
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"154.30.211.130.bc.googleusercontent.com",nocase; classtype:attempted-recon; sid:200000024; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"161.35.142.2",nocase; classtype:attempted-recon; sid:200000025; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"165.227.122.125",nocase; classtype:attempted-recon; sid:200000026; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"171171.familyeyecareofohio.com",nocase; classtype:attempted-recon; sid:200000027; rev:1;)
|
2022-01-28 00:01:46 +00:00
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"173.82.154.253",nocase; classtype:attempted-recon; sid:200000028; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"178.128.108.233.dsl.dyn.forthnet.gr",nocase; classtype:attempted-recon; sid:200000029; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"179.43.140.208",nocase; classtype:attempted-recon; sid:200000030; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"179.48.65.130",nocase; classtype:attempted-recon; sid:200000031; rev:1;)
|
2022-01-29 00:01:47 +00:00
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1799618.com",nocase; classtype:attempted-recon; sid:200000032; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"18.204.21.116",nocase; classtype:attempted-recon; sid:200000033; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"182.73.136.210",nocase; classtype:attempted-recon; sid:200000034; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"185.117.75.207",nocase; classtype:attempted-recon; sid:200000035; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"18sitedev.com",nocase; classtype:attempted-recon; sid:200000036; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"190854.8b.io",nocase; classtype:attempted-recon; sid:200000037; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"198.144.183.186",nocase; classtype:attempted-recon; sid:200000038; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"198.144.183.236",nocase; classtype:attempted-recon; sid:200000039; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"198.98.62.11",nocase; classtype:attempted-recon; sid:200000040; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"19991-2896.s1.webspace.re",nocase; classtype:attempted-recon; sid:200000041; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inch.party",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inich.exchange",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1ncih.exchange",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1stchoiceovens.co.uk-l.rjmajor2001.cat",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2.136.95.251",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.197.195.65",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20000000000358546978544998.tk",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20140301.xyz",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2022-exodus.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2022-girobanken-sparkassen.xyz",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2022.clientepremiumefect.xyz",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2022.intrebrkprsonas.xyz",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2022.solicitudenlinea.xyz",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"208.82.115.230",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"217651.8b.io",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"228.94.92.rev.sfr.net.gghost.ru",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"234354334534543--2342346456456.repl.co",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"234354334534543.2342346456456.repl.co",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"23435675623423--12356575674.repl.co",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"23435675623423.12356575674.repl.co",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"234565676868--3456556757.repl.co",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"234565676868.3456556757.repl.co",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"24323435546456--0980879676465.repl.co",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"24611250.sibforms.com",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2482689012.yolasite.com",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"26bourgogne.eu",nocase; classtype:attempted-recon; sid:200000067; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"299kensingtonroad.my.webex.com",nocase; classtype:attempted-recon; sid:200000068; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2ex2cfu.cn",nocase; classtype:attempted-recon; sid:200000069; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2fa.bthei.com",nocase; classtype:attempted-recon; sid:200000070; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2godesign.com",nocase; classtype:attempted-recon; sid:200000071; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2pil.ru",nocase; classtype:attempted-recon; sid:200000072; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2rfleche.ma",nocase; classtype:attempted-recon; sid:200000073; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"32nju.comalpa.cl",nocase; classtype:attempted-recon; sid:200000074; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34.125.173.70",nocase; classtype:attempted-recon; sid:200000075; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"343i.org",nocase; classtype:attempted-recon; sid:200000076; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"343t3dv9qdufp.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000077; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34534345345.byethost17.com",nocase; classtype:attempted-recon; sid:200000078; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3453457567567--235346456456.repl.co",nocase; classtype:attempted-recon; sid:200000079; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"345353555.byethost12.com",nocase; classtype:attempted-recon; sid:200000080; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34543543535.byethost14.com",nocase; classtype:attempted-recon; sid:200000081; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3457867867876345.35445657567.repl.co",nocase; classtype:attempted-recon; sid:200000082; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"35.192.38.184",nocase; classtype:attempted-recon; sid:200000083; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"35.199.84.117",nocase; classtype:attempted-recon; sid:200000084; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"35.225.222.142",nocase; classtype:attempted-recon; sid:200000085; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365cpcj.com",nocase; classtype:attempted-recon; sid:200000086; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365identification.com",nocase; classtype:attempted-recon; sid:200000087; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365livemobileprotection.com",nocase; classtype:attempted-recon; sid:200000088; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365online-accountsecurityauthenticate.com",nocase; classtype:attempted-recon; sid:200000089; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365online-approval.com",nocase; classtype:attempted-recon; sid:200000090; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3a10a178.s6t6sj4s46tu4sys54y5.pages.dev",nocase; classtype:attempted-recon; sid:200000091; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3b0013b001.novamaxis.com",nocase; classtype:attempted-recon; sid:200000092; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3ck.me",nocase; classtype:attempted-recon; sid:200000093; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3dmensional.agency",nocase; classtype:attempted-recon; sid:200000094; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3dprintersupplies.com.au",nocase; classtype:attempted-recon; sid:200000095; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3e30fc3e.sibforms.com",nocase; classtype:attempted-recon; sid:200000096; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3ff7c459-86b2-4f6d-b6b0-ba6402ef6cb0.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000097; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3j124.csb.app",nocase; classtype:attempted-recon; sid:200000098; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3v5wz.lrs.plus",nocase; classtype:attempted-recon; sid:200000099; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"42.193.110.254",nocase; classtype:attempted-recon; sid:200000100; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4305685968579877--23456756jj.repl.co",nocase; classtype:attempted-recon; sid:200000101; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4305685968579877.23456756jj.repl.co",nocase; classtype:attempted-recon; sid:200000102; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"431431.familyeyecareofohio.com",nocase; classtype:attempted-recon; sid:200000103; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"45.9.20.146",nocase; classtype:attempted-recon; sid:200000104; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"45.9.20.34",nocase; classtype:attempted-recon; sid:200000105; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4645654646456456.byethost17.com",nocase; classtype:attempted-recon; sid:200000106; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4a14def9.sibforms.com",nocase; classtype:attempted-recon; sid:200000107; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4lxkd.r.ag.d.sendibm3.com",nocase; classtype:attempted-recon; sid:200000108; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4r1un.app.link",nocase; classtype:attempted-recon; sid:200000109; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4season.com.kh",nocase; classtype:attempted-recon; sid:200000110; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4upoker.ru",nocase; classtype:attempted-recon; sid:200000111; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4w8bmmjcw86e.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000112; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"51.fi",nocase; classtype:attempted-recon; sid:200000113; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.148.252.166",nocase; classtype:attempted-recon; sid:200000114; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.20.22.249",nocase; classtype:attempted-recon; sid:200000115; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52292936869418365.web.id",nocase; classtype:attempted-recon; sid:200000116; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"53vzxcnk6rwp.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000117; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"56767876823234247--34556756777345l.repl.co",nocase; classtype:attempted-recon; sid:200000118; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"56767876823234247.34556756777345l.repl.co",nocase; classtype:attempted-recon; sid:200000119; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"568678678567546464--4564654645646.repl.co",nocase; classtype:attempted-recon; sid:200000120; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"588pat.ryan.ruthepstein.co.uk",nocase; classtype:attempted-recon; sid:200000121; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5b0f6cb9-0485-4fc7-9775-eb74bb45bbf6.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000122; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5ddb375f.webmail-srvrssoflm333.pages.dev",nocase; classtype:attempted-recon; sid:200000123; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5e841ae2.srvr-cloudmail-srvr6765e7tg.pages.dev",nocase; classtype:attempted-recon; sid:200000124; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5v3rd.blw71.com",nocase; classtype:attempted-recon; sid:200000125; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"613707.selcdn.ru",nocase; classtype:attempted-recon; sid:200000126; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"61da8ae6.6u6566hrrthsh45.pages.dev",nocase; classtype:attempted-recon; sid:200000127; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"62eventt-garenafreefire.duckdns.org",nocase; classtype:attempted-recon; sid:200000128; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"638ca12d-ba2f-451c-8418-faf56b7de7ff.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000129; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"656115.selcdn.ru",nocase; classtype:attempted-recon; sid:200000130; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"66.196.226.139",nocase; classtype:attempted-recon; sid:200000131; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6a7zu9he6mqh.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000132; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6c7f0acc.sibforms.com",nocase; classtype:attempted-recon; sid:200000133; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"702212896572923.web.id",nocase; classtype:attempted-recon; sid:200000134; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"722valley.familyeyecareofohio.com",nocase; classtype:attempted-recon; sid:200000135; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"78.108.89.240",nocase; classtype:attempted-recon; sid:200000136; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"786878.amazoonlinco.vip",nocase; classtype:attempted-recon; sid:200000137; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7wr4u.csb.app",nocase; classtype:attempted-recon; sid:200000138; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7yu3v.csb.app",nocase; classtype:attempted-recon; sid:200000139; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8.215.32.173",nocase; classtype:attempted-recon; sid:200000140; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"800529.com",nocase; classtype:attempted-recon; sid:200000141; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"864864.furlifenaturals.com",nocase; classtype:attempted-recon; sid:200000142; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"876765653567--0980879676465.repl.co",nocase; classtype:attempted-recon; sid:200000143; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"876765653567.0980879676465.repl.co",nocase; classtype:attempted-recon; sid:200000144; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8899.jp",nocase; classtype:attempted-recon; sid:200000145; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"89ix7y0.cn",nocase; classtype:attempted-recon; sid:200000146; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8bhabc.go2epal.com",nocase; classtype:attempted-recon; sid:200000147; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8d73a7a81bc7034a17acdf7d3120a77296ddb061.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000148; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8oqwe.amorlu.com",nocase; classtype:attempted-recon; sid:200000149; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"909asemidguact5oqemail22bellt66winniegarvin7732construction7732.weebly.com",nocase; classtype:attempted-recon; sid:200000150; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"92.rev.sfr.net.gghost.ru",nocase; classtype:attempted-recon; sid:200000151; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"95daf9a43a.nxcli.net",nocase; classtype:attempted-recon; sid:200000152; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"96.43.82.74",nocase; classtype:attempted-recon; sid:200000153; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9d62cfee-59b3-42a8-9542-4b3a32692792.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9ftytucsh4ph.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000155; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9jagx.lrs.plus",nocase; classtype:attempted-recon; sid:200000156; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a-1store.jp",nocase; classtype:attempted-recon; sid:200000157; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.2827e82ca6640ef29594fb288383c901159970954a6ca74d562cd3aa.com",nocase; classtype:attempted-recon; sid:200000158; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.60b7ac265566e3da4341f765b2d2a73200f8f1db57b0b005a1afdc00.com",nocase; classtype:attempted-recon; sid:200000159; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.insecurpage.recovery-safty.workers.dev",nocase; classtype:attempted-recon; sid:200000160; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0570626.xsph.ru",nocase; classtype:attempted-recon; sid:200000161; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0626542.xsph.ru",nocase; classtype:attempted-recon; sid:200000162; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0626676.xsph.ru",nocase; classtype:attempted-recon; sid:200000163; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a4d3b42c.chgmar-d8y.pages.dev",nocase; classtype:attempted-recon; sid:200000164; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a71843c1.mailssocloud-srvr65e5rd.pages.dev",nocase; classtype:attempted-recon; sid:200000165; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a894ec7f.46t33454t4.pages.dev",nocase; classtype:attempted-recon; sid:200000166; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aagamsteelcorporation.com",nocase; classtype:attempted-recon; sid:200000167; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abbylifo.com",nocase; classtype:attempted-recon; sid:200000168; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abodybuildinglifestyle.com",nocase; classtype:attempted-recon; sid:200000169; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absaonline2021.website2.me",nocase; classtype:attempted-recon; sid:200000170; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absolute-containers-sip.business.site",nocase; classtype:attempted-recon; sid:200000171; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absolutepleasure.com.my",nocase; classtype:attempted-recon; sid:200000172; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accedibperweb.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000173; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account-webapp-gov.com",nocase; classtype:attempted-recon; sid:200000174; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.amanznn.com",nocase; classtype:attempted-recon; sid:200000175; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.herephyshy.info",nocase; classtype:attempted-recon; sid:200000176; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.verifications.help-page.workers.dev",nocase; classtype:attempted-recon; sid:200000177; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts-autoscout24.de",nocase; classtype:attempted-recon; sid:200000178; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessobradesco.digital",nocase; classtype:attempted-recon; sid:200000179; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ach-centr.ru",nocase; classtype:attempted-recon; sid:200000180; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"achebeadaeze12310-9fc4c9.ingress-comporellon.easywp.com",nocase; classtype:attempted-recon; sid:200000181; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"achieve-college-education.org",nocase; classtype:attempted-recon; sid:200000182; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acoe.uobceor.com",nocase; classtype:attempted-recon; sid:200000183; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"actificationpagesreconfirmidentitybusinesshelpcenter.co.vu",nocase; classtype:attempted-recon; sid:200000184; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activartransferenciainternacional.com",nocase; classtype:attempted-recon; sid:200000185; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activate-hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200000186; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adamfeber.com",nocase; classtype:attempted-recon; sid:200000187; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adcloudserver.com",nocase; classtype:attempted-recon; sid:200000188; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ade-jasa-antar-jemput.web.id",nocase; classtype:attempted-recon; sid:200000189; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-formserviceupdates.weeblysite.com",nocase; classtype:attempted-recon; sid:200000190; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adminemerpay.com",nocase; classtype:attempted-recon; sid:200000191; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adpunemploymentclaims.sharefile.com",nocase; classtype:attempted-recon; sid:200000192; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adsmarca.com",nocase; classtype:attempted-recon; sid:200000193; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeon.co.nuvmsouas.com",nocase; classtype:attempted-recon; sid:200000194; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava1.web.app",nocase; classtype:attempted-recon; sid:200000196; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000197; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava2.web.app",nocase; classtype:attempted-recon; sid:200000198; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000199; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava3.web.app",nocase; classtype:attempted-recon; sid:200000200; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava4.web.app",nocase; classtype:attempted-recon; sid:200000201; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000202; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava5.web.app",nocase; classtype:attempted-recon; sid:200000203; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000204; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava6.web.app",nocase; classtype:attempted-recon; sid:200000205; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000206; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000207; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerosava9.web.app",nocase; classtype:attempted-recon; sid:200000208; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"affixsports.com",nocase; classtype:attempted-recon; sid:200000209; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afreemart.xyz",nocase; classtype:attempted-recon; sid:200000210; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agadvilab.com",nocase; classtype:attempted-recon; sid:200000211; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aggiornacontomps.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000212; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agi78.comicat.ir",nocase; classtype:attempted-recon; sid:200000213; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agora.imb.br",nocase; classtype:attempted-recon; sid:200000214; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agrimetiersmartinique.fr",nocase; classtype:attempted-recon; sid:200000215; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agurimu-nagoya.com",nocase; classtype:attempted-recon; sid:200000216; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahhhh.pe.kr",nocase; classtype:attempted-recon; sid:200000217; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aid-validation-human.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200000218; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airportprescreening.com",nocase; classtype:attempted-recon; sid:200000219; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airu.co.jp",nocase; classtype:attempted-recon; sid:200000220; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ak-confirm.gq",nocase; classtype:attempted-recon; sid:200000221; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akanksha3012.github.io",nocase; classtype:attempted-recon; sid:200000222; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aks34.github.io",nocase; classtype:attempted-recon; sid:200000223; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aksehirelittotel.com",nocase; classtype:attempted-recon; sid:200000224; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aktualizacja.jst.pl",nocase; classtype:attempted-recon; sid:200000225; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alareentading-catalog.page.tl",nocase; classtype:attempted-recon; sid:200000226; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albel.intnet.mu",nocase; classtype:attempted-recon; sid:200000227; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldana.in",nocase; classtype:attempted-recon; sid:200000228; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alder-shy-sunspot.glitch.me",nocase; classtype:attempted-recon; sid:200000229; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alerts.department.improvement.workers.dev",nocase; classtype:attempted-recon; sid:200000230; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aletihadcbc.ae",nocase; classtype:attempted-recon; sid:200000231; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alexxou.website2.me",nocase; classtype:attempted-recon; sid:200000232; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"algotextil.com.br",nocase; classtype:attempted-recon; sid:200000233; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aliciabot.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000234; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alkhalilgraphics.com",nocase; classtype:attempted-recon; sid:200000235; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000236; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus10.web.app",nocase; classtype:attempted-recon; sid:200000237; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000238; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus11.web.app",nocase; classtype:attempted-recon; sid:200000239; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000240; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus13.web.app",nocase; classtype:attempted-recon; sid:200000241; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000242; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus16.web.app",nocase; classtype:attempted-recon; sid:200000243; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000244; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus17.web.app",nocase; classtype:attempted-recon; sid:200000245; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000246; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus18.web.app",nocase; classtype:attempted-recon; sid:200000247; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000248; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus19.web.app",nocase; classtype:attempted-recon; sid:200000249; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000250; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus20.web.app",nocase; classtype:attempted-recon; sid:200000251; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000252; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus22.web.app",nocase; classtype:attempted-recon; sid:200000253; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000254; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus23.web.app",nocase; classtype:attempted-recon; sid:200000255; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000256; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus24.web.app",nocase; classtype:attempted-recon; sid:200000257; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000258; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus26.web.app",nocase; classtype:attempted-recon; sid:200000259; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000260; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus28.web.app",nocase; classtype:attempted-recon; sid:200000261; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000262; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus29.web.app",nocase; classtype:attempted-recon; sid:200000263; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000264; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus31.web.app",nocase; classtype:attempted-recon; sid:200000265; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000266; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus32.web.app",nocase; classtype:attempted-recon; sid:200000267; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000268; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus33.web.app",nocase; classtype:attempted-recon; sid:200000269; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000270; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus34.web.app",nocase; classtype:attempted-recon; sid:200000271; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000272; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus35.web.app",nocase; classtype:attempted-recon; sid:200000273; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000274; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus36.web.app",nocase; classtype:attempted-recon; sid:200000275; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus37.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000276; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus37.web.app",nocase; classtype:attempted-recon; sid:200000277; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus38.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000278; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus38.web.app",nocase; classtype:attempted-recon; sid:200000279; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000280; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus39.web.app",nocase; classtype:attempted-recon; sid:200000281; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000282; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus4.web.app",nocase; classtype:attempted-recon; sid:200000283; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000284; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus40.web.app",nocase; classtype:attempted-recon; sid:200000285; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus41.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000286; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus41.web.app",nocase; classtype:attempted-recon; sid:200000287; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus42.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000288; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus42.web.app",nocase; classtype:attempted-recon; sid:200000289; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000290; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus43.web.app",nocase; classtype:attempted-recon; sid:200000291; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000292; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus44.web.app",nocase; classtype:attempted-recon; sid:200000293; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000294; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus45.web.app",nocase; classtype:attempted-recon; sid:200000295; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000296; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus46.web.app",nocase; classtype:attempted-recon; sid:200000297; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus47.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000298; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus47.web.app",nocase; classtype:attempted-recon; sid:200000299; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000300; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus48.web.app",nocase; classtype:attempted-recon; sid:200000301; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000302; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus49.web.app",nocase; classtype:attempted-recon; sid:200000303; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000304; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus5.web.app",nocase; classtype:attempted-recon; sid:200000305; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus50.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000306; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus50.web.app",nocase; classtype:attempted-recon; sid:200000307; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus51.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000308; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus51.web.app",nocase; classtype:attempted-recon; sid:200000309; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000310; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus52.web.app",nocase; classtype:attempted-recon; sid:200000311; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus53.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000312; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus53.web.app",nocase; classtype:attempted-recon; sid:200000313; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus54.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000314; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus54.web.app",nocase; classtype:attempted-recon; sid:200000315; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus55.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000316; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus55.web.app",nocase; classtype:attempted-recon; sid:200000317; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus56.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000318; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus56.web.app",nocase; classtype:attempted-recon; sid:200000319; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus57.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000320; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus57.web.app",nocase; classtype:attempted-recon; sid:200000321; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus58.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000322; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus58.web.app",nocase; classtype:attempted-recon; sid:200000323; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus59.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000324; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus59.web.app",nocase; classtype:attempted-recon; sid:200000325; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000326; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus6.web.app",nocase; classtype:attempted-recon; sid:200000327; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus60.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000328; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus60.web.app",nocase; classtype:attempted-recon; sid:200000329; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus61.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000330; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus61.web.app",nocase; classtype:attempted-recon; sid:200000331; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000332; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus62.web.app",nocase; classtype:attempted-recon; sid:200000333; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus63.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000334; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus63.web.app",nocase; classtype:attempted-recon; sid:200000335; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus64.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000336; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus64.web.app",nocase; classtype:attempted-recon; sid:200000337; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus65.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000338; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus65.web.app",nocase; classtype:attempted-recon; sid:200000339; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus66.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000340; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus66.web.app",nocase; classtype:attempted-recon; sid:200000341; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000342; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus67.web.app",nocase; classtype:attempted-recon; sid:200000343; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus68.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000344; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus68.web.app",nocase; classtype:attempted-recon; sid:200000345; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus69.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000346; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus69.web.app",nocase; classtype:attempted-recon; sid:200000347; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000348; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus7.web.app",nocase; classtype:attempted-recon; sid:200000349; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus70.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000350; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus70.web.app",nocase; classtype:attempted-recon; sid:200000351; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus71.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000352; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus71.web.app",nocase; classtype:attempted-recon; sid:200000353; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus72.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000354; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus72.web.app",nocase; classtype:attempted-recon; sid:200000355; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus73.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000356; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus73.web.app",nocase; classtype:attempted-recon; sid:200000357; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000358; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus74.web.app",nocase; classtype:attempted-recon; sid:200000359; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus75.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000360; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus75.web.app",nocase; classtype:attempted-recon; sid:200000361; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000362; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus76.web.app",nocase; classtype:attempted-recon; sid:200000363; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus77.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000364; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus77.web.app",nocase; classtype:attempted-recon; sid:200000365; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus78.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000366; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus78.web.app",nocase; classtype:attempted-recon; sid:200000367; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus79.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000368; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus79.web.app",nocase; classtype:attempted-recon; sid:200000369; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000370; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus8.web.app",nocase; classtype:attempted-recon; sid:200000371; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus80.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000372; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus80.web.app",nocase; classtype:attempted-recon; sid:200000373; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus81.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000374; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus81.web.app",nocase; classtype:attempted-recon; sid:200000375; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus82.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000376; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus82.web.app",nocase; classtype:attempted-recon; sid:200000377; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000378; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus83.web.app",nocase; classtype:attempted-recon; sid:200000379; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000380; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allesvouus9.web.app",nocase; classtype:attempted-recon; sid:200000381; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alliancesforafrica.tk",nocase; classtype:attempted-recon; sid:200000382; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alliancesuper.com",nocase; classtype:attempted-recon; sid:200000383; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aloun.ps",nocase; classtype:attempted-recon; sid:200000384; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alphabnkgre.com",nocase; classtype:attempted-recon; sid:200000385; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alqadi.ps",nocase; classtype:attempted-recon; sid:200000386; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alquilervillora.net",nocase; classtype:attempted-recon; sid:200000387; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alsofft.com",nocase; classtype:attempted-recon; sid:200000388; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amacion-update.742pxuzpcd.buzz",nocase; classtype:attempted-recon; sid:200000389; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amandakaroline.com.br",nocase; classtype:attempted-recon; sid:200000390; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amanzeiwgnehyerterlewr.xyz",nocase; classtype:attempted-recon; sid:200000391; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amaozn.ywcimei.com",nocase; classtype:attempted-recon; sid:200000392; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazeoingeroigewurioesaur.xyz",nocase; classtype:attempted-recon; sid:200000393; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazom.mdrtou.xyz",nocase; classtype:attempted-recon; sid:200000394; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazom.mokurs.xyz",nocase; classtype:attempted-recon; sid:200000395; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazom.udmtea.xyz",nocase; classtype:attempted-recon; sid:200000396; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-interruption.com",nocase; classtype:attempted-recon; sid:200000397; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.amazonsignmail.xyz",nocase; classtype:attempted-recon; sid:200000398; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.co.jp.1157.cf",nocase; classtype:attempted-recon; sid:200000399; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.co.jp.abaiaccounting.cn",nocase; classtype:attempted-recon; sid:200000400; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.gousana.casa",nocase; classtype:attempted-recon; sid:200000401; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.oa6yr1l.cn",nocase; classtype:attempted-recon; sid:200000402; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.works.ga",nocase; classtype:attempted-recon; sid:200000403; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonhome.sfrmobiles.com",nocase; classtype:attempted-recon; sid:200000404; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazoon.co.op.nuveie.cn",nocase; classtype:attempted-recon; sid:200000405; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazoon.co.op.o4j.top",nocase; classtype:attempted-recon; sid:200000406; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amc-training.com",nocase; classtype:attempted-recon; sid:200000407; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"americanexeopress.com",nocase; classtype:attempted-recon; sid:200000408; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"americanexpress-auth.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000409; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amguevara.com",nocase; classtype:attempted-recon; sid:200000410; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amidabuli.com",nocase; classtype:attempted-recon; sid:200000411; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000412; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov1.web.app",nocase; classtype:attempted-recon; sid:200000413; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000414; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov2.web.app",nocase; classtype:attempted-recon; sid:200000415; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000416; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov3.web.app",nocase; classtype:attempted-recon; sid:200000417; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000418; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov4.web.app",nocase; classtype:attempted-recon; sid:200000419; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000420; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov5.web.app",nocase; classtype:attempted-recon; sid:200000421; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000422; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov6.web.app",nocase; classtype:attempted-recon; sid:200000423; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000424; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov7.web.app",nocase; classtype:attempted-recon; sid:200000425; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000426; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov8.web.app",nocase; classtype:attempted-recon; sid:200000427; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000428; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlnov9.web.app",nocase; classtype:attempted-recon; sid:200000429; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amoazom.rm82j6-t8.cn",nocase; classtype:attempted-recon; sid:200000430; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amonzau_co_take.ktbf.shop",nocase; classtype:attempted-recon; sid:200000431; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amosleh.com",nocase; classtype:attempted-recon; sid:200000432; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozq.com",nocase; classtype:attempted-recon; sid:200000433; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amreeth.github.io",nocase; classtype:attempted-recon; sid:200000434; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amzon.co.jp.uiatsn.com",nocase; classtype:attempted-recon; sid:200000435; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anaksmpviral.duckdns.org",nocase; classtype:attempted-recon; sid:200000436; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"analisemercadopago.ml",nocase; classtype:attempted-recon; sid:200000437; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anandsr-dev.github.io",nocase; classtype:attempted-recon; sid:200000438; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anarchitecturestudio.com",nocase; classtype:attempted-recon; sid:200000439; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazaons.co.jplogindfs7eds9.h0g1b7e.cn",nocase; classtype:attempted-recon; sid:200000440; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazaons.co.jplogindfs7efsd9.qivivug.cn",nocase; classtype:attempted-recon; sid:200000441; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazaons.co.jplogindfs7efsd9d.pf1ksw1.cn",nocase; classtype:attempted-recon; sid:200000442; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazaons.co.jpsinginds3e8df.hxwwjtm.cn",nocase; classtype:attempted-recon; sid:200000443; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anbn.ru",nocase; classtype:attempted-recon; sid:200000444; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andersonstrategic.com.au",nocase; classtype:attempted-recon; sid:200000445; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andmantelionazxpionloasion.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000446; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andmantelionazxpionloasion.web.app",nocase; classtype:attempted-recon; sid:200000447; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"angiofsi.page.link",nocase; classtype:attempted-recon; sid:200000448; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anhduongjsc.com",nocase; classtype:attempted-recon; sid:200000449; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anj-azakp.run.goorm.io",nocase; classtype:attempted-recon; sid:200000450; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anjalijha167.github.io",nocase; classtype:attempted-recon; sid:200000451; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ankehealing.ca",nocase; classtype:attempted-recon; sid:200000452; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anmzo.com",nocase; classtype:attempted-recon; sid:200000453; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ansr.ro",nocase; classtype:attempted-recon; sid:200000454; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anuazon.co.jpsinginxfds0dfud.eyebrain.cn",nocase; classtype:attempted-recon; sid:200000455; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anuazon.co.jpsinginxfds0dfud.goodgear.cn",nocase; classtype:attempted-recon; sid:200000456; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anyswcap.exchange",nocase; classtype:attempted-recon; sid:200000457; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolmailsevisre2.weebly.com",nocase; classtype:attempted-recon; sid:200000458; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolmailsrejrkedgvfcfvhfcjnvkf.weebly.com",nocase; classtype:attempted-recon; sid:200000459; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolmailukhelplinecustomerservice.blogspot.com",nocase; classtype:attempted-recon; sid:200000460; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolmailukhelplinecustomerservice.blogspot.com.au",nocase; classtype:attempted-recon; sid:200000461; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolxperience.com",nocase; classtype:attempted-recon; sid:200000462; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ap-bombcrypto-ol.blogspot.com",nocase; classtype:attempted-recon; sid:200000463; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apesbenerlonteh.com",nocase; classtype:attempted-recon; sid:200000464; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-7b9202fc-725f-40ed-9705-f373850bd82b.cleverapps.io",nocase; classtype:attempted-recon; sid:200000465; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-bombcrypto-io-login-ab.blogspot.com",nocase; classtype:attempted-recon; sid:200000466; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-n26.com",nocase; classtype:attempted-recon; sid:200000467; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-polyigon-safariga.pagedemo.co",nocase; classtype:attempted-recon; sid:200000468; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.bydn217.club",nocase; classtype:attempted-recon; sid:200000469; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.facebook2022.link",nocase; classtype:attempted-recon; sid:200000470; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.fiiber.ca",nocase; classtype:attempted-recon; sid:200000471; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.moneylinecreditcorporation.com",nocase; classtype:attempted-recon; sid:200000472; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.polygon-tehcnolagy.com",nocase; classtype:attempted-recon; sid:200000473; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.skiff.org",nocase; classtype:attempted-recon; sid:200000474; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.sugarsync.com",nocase; classtype:attempted-recon; sid:200000475; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.webwalletsauthenticate.com",nocase; classtype:attempted-recon; sid:200000476; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appatualizecef.com",nocase; classtype:attempted-recon; sid:200000477; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appibsolicitud.com",nocase; classtype:attempted-recon; sid:200000478; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apple-caseid7586.com",nocase; classtype:attempted-recon; sid:200000479; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"application-caf.com",nocase; classtype:attempted-recon; sid:200000480; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apporal-live.cf",nocase; classtype:attempted-recon; sid:200000481; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aquaqualitas.com",nocase; classtype:attempted-recon; sid:200000482; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arafathrumman.github.io",nocase; classtype:attempted-recon; sid:200000483; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"archivio-supporto.sitoper.it",nocase; classtype:attempted-recon; sid:200000484; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aregty.com",nocase; classtype:attempted-recon; sid:200000485; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"areueaom.gtpzcve.cn",nocase; classtype:attempted-recon; sid:200000486; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"areueaom.gtva.cn",nocase; classtype:attempted-recon; sid:200000487; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ariarequirdmainipr.web.app",nocase; classtype:attempted-recon; sid:200000488; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arm-travel.com",nocase; classtype:attempted-recon; sid:200000489; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aromatic.webenliven.in",nocase; classtype:attempted-recon; sid:200000490; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arthamahotels.com",nocase; classtype:attempted-recon; sid:200000491; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artlux.com.pl",nocase; classtype:attempted-recon; sid:200000492; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arub-service.org",nocase; classtype:attempted-recon; sid:200000493; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aruba.assistenza-id.info",nocase; classtype:attempted-recon; sid:200000494; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aruba.assistenza-sys.info",nocase; classtype:attempted-recon; sid:200000495; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aruba.fatt.ids-sys.com",nocase; classtype:attempted-recon; sid:200000496; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aruba.pagamento-sys.com",nocase; classtype:attempted-recon; sid:200000497; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asaipestcontrol.com",nocase; classtype:attempted-recon; sid:200000498; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asd.9sw53wk.cn",nocase; classtype:attempted-recon; sid:200000499; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asdoindbadf.com",nocase; classtype:attempted-recon; sid:200000500; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asgard-ampqy.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200000501; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"askarmotorluaraclar.com",nocase; classtype:attempted-recon; sid:200000502; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"associatesmd.com",nocase; classtype:attempted-recon; sid:200000503; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-t-support-service1.sitey.me",nocase; classtype:attempted-recon; sid:200000504; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-t-yahoo.sitey.me",nocase; classtype:attempted-recon; sid:200000505; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atendimentosacnu.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000506; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atento-fdi.plusoftomni.com.br",nocase; classtype:attempted-recon; sid:200000507; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ativacao-online73681.com",nocase; classtype:attempted-recon; sid:200000508; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atnr76dxku336szy.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000509; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-mail-verification-box.weebly.com",nocase; classtype:attempted-recon; sid:200000510; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmembersupport786.weebly.com",nocase; classtype:attempted-recon; sid:200000511; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attonlineservicesemail.weebly.com",nocase; classtype:attempted-recon; sid:200000512; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attverifymanildsd.weebly.com",nocase; classtype:attempted-recon; sid:200000513; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atualizacao-online547864.com",nocase; classtype:attempted-recon; sid:200000514; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atualizarmodolo.com",nocase; classtype:attempted-recon; sid:200000515; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aurumship.com",nocase; classtype:attempted-recon; sid:200000516; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aushotel.es",nocase; classtype:attempted-recon; sid:200000517; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver37.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000518; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver37.web.app",nocase; classtype:attempted-recon; sid:200000519; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver38.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000520; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver38.web.app",nocase; classtype:attempted-recon; sid:200000521; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000522; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver39.web.app",nocase; classtype:attempted-recon; sid:200000523; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver41.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000524; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver41.web.app",nocase; classtype:attempted-recon; sid:200000525; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000526; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver43.web.app",nocase; classtype:attempted-recon; sid:200000527; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000528; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver44.web.app",nocase; classtype:attempted-recon; sid:200000529; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000530; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver45.web.app",nocase; classtype:attempted-recon; sid:200000531; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000532; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver46.web.app",nocase; classtype:attempted-recon; sid:200000533; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver47.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000534; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver47.web.app",nocase; classtype:attempted-recon; sid:200000535; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000536; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autentiateserver48.web.app",nocase; classtype:attempted-recon; sid:200000537; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-task1-m.web.app",nocase; classtype:attempted-recon; sid:200000538; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-webmailakeonetcom.yolasite.com",nocase; classtype:attempted-recon; sid:200000539; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenti18.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200000540; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authuxeehmutconjxmailssocl.web.app",nocase; classtype:attempted-recon; sid:200000541; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autodiscover.ryder-dutton.co.uk",nocase; classtype:attempted-recon; sid:200000542; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoexprs.com",nocase; classtype:attempted-recon; sid:200000543; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoranplususeremailprocessingupdate.pages.dev",nocase; classtype:attempted-recon; sid:200000544; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoscurt24.de",nocase; classtype:attempted-recon; sid:200000545; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autumn-sun-4a21.paqesads-scure.workers.dev",nocase; classtype:attempted-recon; sid:200000546; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avrorganics.com",nocase; classtype:attempted-recon; sid:200000547; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aware-steep-tern.glitch.me",nocase; classtype:attempted-recon; sid:200000548; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinily.net",nocase; classtype:attempted-recon; sid:200000549; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinity-supportwallet.com",nocase; classtype:attempted-recon; sid:200000550; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axiesupportappeal.com",nocase; classtype:attempted-recon; sid:200000551; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axlr.in",nocase; classtype:attempted-recon; sid:200000552; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ayolahbantu1500dolar.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000553; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azb3s.cf",nocase; classtype:attempted-recon; sid:200000554; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azmznonos_co_long.akys.shop",nocase; classtype:attempted-recon; sid:200000555; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azure.delamibrands.com",nocase; classtype:attempted-recon; sid:200000556; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b.com.0cdb6084fc320a42a6418192753f5960.laremolonarestaurante.com",nocase; classtype:attempted-recon; sid:200000557; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b059c86968a6427389952025bcee9886.svc.dynamics.com",nocase; classtype:attempted-recon; sid:200000558; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b4e921f0.sso-mailsrvr-4344e5teed.pages.dev",nocase; classtype:attempted-recon; sid:200000559; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b96f7f93.sibforms.com",nocase; classtype:attempted-recon; sid:200000560; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b97bca39.srvr-cloudmail-srvr6754e5rte.pages.dev",nocase; classtype:attempted-recon; sid:200000561; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bag-macben.eu",nocase; classtype:attempted-recon; sid:200000562; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bakhai.vn",nocase; classtype:attempted-recon; sid:200000563; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bamarfoundation.org",nocase; classtype:attempted-recon; sid:200000564; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banca-electronica1.odoo.com",nocase; classtype:attempted-recon; sid:200000565; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinternet-interbark.pcriot.com",nocase; classtype:attempted-recon; sid:200000566; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinternet.interban.pe.magictourscancun.com",nocase; classtype:attempted-recon; sid:200000567; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinternet.interbrnpe.com",nocase; classtype:attempted-recon; sid:200000568; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinternet.lnterbank.pronductos.com",nocase; classtype:attempted-recon; sid:200000569; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporintrnet.interbnkperu.es",nocase; classtype:attempted-recon; sid:200000570; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.clinodontosurubim.com.br",nocase; classtype:attempted-recon; sid:200000571; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.dominandoagestao.com.br",nocase; classtype:attempted-recon; sid:200000572; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.englobasalud.com",nocase; classtype:attempted-recon; sid:200000573; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.esaspetrofund.org",nocase; classtype:attempted-recon; sid:200000574; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.industriadecosmeticosaboutyou.com",nocase; classtype:attempted-recon; sid:200000575; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.libertycanais.com.br",nocase; classtype:attempted-recon; sid:200000576; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancoiinng.site44.com",nocase; classtype:attempted-recon; sid:200000577; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacin.zendesk.com",nocase; classtype:attempted-recon; sid:200000578; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banki0wa.us",nocase; classtype:attempted-recon; sid:200000579; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banlnternetprstamonline.online",nocase; classtype:attempted-recon; sid:200000580; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bannerbank.control-inc.com",nocase; classtype:attempted-recon; sid:200000581; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bannerchampnyc.com",nocase; classtype:attempted-recon; sid:200000582; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banparacardportal.com",nocase; classtype:attempted-recon; sid:200000583; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banporlnternet5.online",nocase; classtype:attempted-recon; sid:200000584; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banporlnternet6.com",nocase; classtype:attempted-recon; sid:200000585; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baradua.it",nocase; classtype:attempted-recon; sid:200000586; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"barcaenlinea-interbark.pe-comsulta.xyz",nocase; classtype:attempted-recon; sid:200000587; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"barcaporn3t-inferbanrk.com",nocase; classtype:attempted-recon; sid:200000588; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baygmw.tk",nocase; classtype:attempted-recon; sid:200000589; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bc1.paiementervice.com",nocase; classtype:attempted-recon; sid:200000590; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bconclutmjy.ru",nocase; classtype:attempted-recon; sid:200000591; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcp-marketing.com",nocase; classtype:attempted-recon; sid:200000592; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcpzonaseguirabeta.com",nocase; classtype:attempted-recon; sid:200000593; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bd29uf3xv.s3.us-west-2.amazonaws.com",nocase; classtype:attempted-recon; sid:200000594; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"be-home.web.do",nocase; classtype:attempted-recon; sid:200000595; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bearmybrand.com",nocase; classtype:attempted-recon; sid:200000596; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beast-blog.com",nocase; classtype:attempted-recon; sid:200000597; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beecham-qgscz.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200000598; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beeckenpetty.com",nocase; classtype:attempted-recon; sid:200000599; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"befuck.biz",nocase; classtype:attempted-recon; sid:200000600; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beijing.vfzfy1v.cn",nocase; classtype:attempted-recon; sid:200000601; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bell-commutation-upgrade.webflow.io",nocase; classtype:attempted-recon; sid:200000602; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"belovedaroma.com",nocase; classtype:attempted-recon; sid:200000603; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"berketurizm.com",nocase; classtype:attempted-recon; sid:200000604; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bethpageonlinecredit.com",nocase; classtype:attempted-recon; sid:200000605; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"betinhell.games",nocase; classtype:attempted-recon; sid:200000606; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bexwebmailupdate.web.app",nocase; classtype:attempted-recon; sid:200000607; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beyondsmiles.co.in",nocase; classtype:attempted-recon; sid:200000608; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bharathi1809.github.io",nocase; classtype:attempted-recon; sid:200000609; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhavin0077.github.io",nocase; classtype:attempted-recon; sid:200000610; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhddf.uwe6ui0.cn",nocase; classtype:attempted-recon; sid:200000611; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhdf.bdc9985.cn",nocase; classtype:attempted-recon; sid:200000612; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhdf.ryhk63.cn",nocase; classtype:attempted-recon; sid:200000613; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhdf.t18v2kr.cn",nocase; classtype:attempted-recon; sid:200000614; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhdf.y0ai5w8.cn",nocase; classtype:attempted-recon; sid:200000615; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhgd.48ud0ez.cn",nocase; classtype:attempted-recon; sid:200000616; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhgdd.qlljdgs.cn",nocase; classtype:attempted-recon; sid:200000617; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhgxa.eo76sni.cn",nocase; classtype:attempted-recon; sid:200000618; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhhcd.9bzuw49.cn",nocase; classtype:attempted-recon; sid:200000619; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhhxaa.123qi7b.cn",nocase; classtype:attempted-recon; sid:200000620; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhxdd.2hllf8x.cn",nocase; classtype:attempted-recon; sid:200000621; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bicicentroslezama.com",nocase; classtype:attempted-recon; sid:200000622; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biedronka-news.biz",nocase; classtype:attempted-recon; sid:200000623; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biedronka-news.us",nocase; classtype:attempted-recon; sid:200000624; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biedronkainvest.biz",nocase; classtype:attempted-recon; sid:200000625; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bikiniquote.com",nocase; classtype:attempted-recon; sid:200000626; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bilacintatakk.institute-pagess.workers.dev",nocase; classtype:attempted-recon; sid:200000627; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bilasajaterjadii.institute-pagess.workers.dev",nocase; classtype:attempted-recon; sid:200000628; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billingfailure-o2.com",nocase; classtype:attempted-recon; sid:200000629; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bioenergyevitalite.com",nocase; classtype:attempted-recon; sid:200000630; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"birlacitywaterpark.com",nocase; classtype:attempted-recon; sid:200000631; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biroperekonomian.sumbarprov.go.id",nocase; classtype:attempted-recon; sid:200000632; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biswap.fm",nocase; classtype:attempted-recon; sid:200000633; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biswapdapp.org",nocase; classtype:attempted-recon; sid:200000634; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitbaink.web.app",nocase; classtype:attempted-recon; sid:200000635; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitel000.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000636; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitflyerfr.cc",nocase; classtype:attempted-recon; sid:200000637; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bithunnb.web.app",nocase; classtype:attempted-recon; sid:200000638; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitmexinc.com",nocase; classtype:attempted-recon; sid:200000639; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitsrflyer.com",nocase; classtype:attempted-recon; sid:200000640; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitstarzcasino.ru",nocase; classtype:attempted-recon; sid:200000641; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bizlinktek.com",nocase; classtype:attempted-recon; sid:200000642; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bkpbarubi2108.duckdns.org",nocase; classtype:attempted-recon; sid:200000643; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blanchevetements.com",nocase; classtype:attempted-recon; sid:200000644; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blockchain-fix.org",nocase; classtype:attempted-recon; sid:200000645; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blog.booxium.com",nocase; classtype:attempted-recon; sid:200000646; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blog.drmostafafouadivf.com",nocase; classtype:attempted-recon; sid:200000647; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blog.weiwanjia.com",nocase; classtype:attempted-recon; sid:200000648; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blowfish-ltd.co.uk",nocase; classtype:attempted-recon; sid:200000649; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blswup.org",nocase; classtype:attempted-recon; sid:200000650; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bn-seguridadperu.com",nocase; classtype:attempted-recon; sid:200000651; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnconacional.odoo.com",nocase; classtype:attempted-recon; sid:200000652; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncre.odoo.com",nocase; classtype:attempted-recon; sid:200000653; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bndigitalpersonas.com",nocase; classtype:attempted-recon; sid:200000654; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bociltiktokcrot2.duckdns.org",nocase; classtype:attempted-recon; sid:200000655; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bodiedbydiggity.com",nocase; classtype:attempted-recon; sid:200000656; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bogdonovlerer.com",nocase; classtype:attempted-recon; sid:200000657; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boiteevocale5sa.fr",nocase; classtype:attempted-recon; sid:200000658; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boitevocale2022.dorik.io",nocase; classtype:attempted-recon; sid:200000659; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boitevocaleorangeweb.kleap.co",nocase; classtype:attempted-recon; sid:200000660; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bokgabanesolutions.co.za",nocase; classtype:attempted-recon; sid:200000661; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boldd.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200000662; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bookfbs.evangsamuelministries.com",nocase; classtype:attempted-recon; sid:200000663; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boxes.com.py",nocase; classtype:attempted-recon; sid:200000664; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"br00ksusa.com",nocase; classtype:attempted-recon; sid:200000665; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"br622.teste.website",nocase; classtype:attempted-recon; sid:200000666; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bradesco.atualizaconta.com",nocase; classtype:attempted-recon; sid:200000667; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brahim-s-school-19eb.thinkific.com",nocase; classtype:attempted-recon; sid:200000668; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brhealth.in",nocase; classtype:attempted-recon; sid:200000669; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-forrunning.top",nocase; classtype:attempted-recon; sid:200000670; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-justforjogging.top",nocase; classtype:attempted-recon; sid:200000671; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-move.top",nocase; classtype:attempted-recon; sid:200000672; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-ooke.top",nocase; classtype:attempted-recon; sid:200000673; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-runfarther.top",nocase; classtype:attempted-recon; sid:200000674; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsdaodab.top",nocase; classtype:attempted-recon; sid:200000675; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsdauofc.top",nocase; classtype:attempted-recon; sid:200000676; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsgdfaja.top",nocase; classtype:attempted-recon; sid:200000677; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks1984.shop",nocase; classtype:attempted-recon; sid:200000678; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksair.top",nocase; classtype:attempted-recon; sid:200000679; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksale.top",nocase; classtype:attempted-recon; sid:200000680; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksboom.top",nocase; classtype:attempted-recon; sid:200000681; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksdiscount.top",nocase; classtype:attempted-recon; sid:200000682; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookshgonline.store",nocase; classtype:attempted-recon; sid:200000683; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookshoesonline.store",nocase; classtype:attempted-recon; sid:200000684; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookshosdiscount.store",nocase; classtype:attempted-recon; sid:200000685; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookslife.top",nocase; classtype:attempted-recon; sid:200000686; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksmajor.top",nocase; classtype:attempted-recon; sid:200000687; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksnewmethod.top",nocase; classtype:attempted-recon; sid:200000688; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksnewsports.top",nocase; classtype:attempted-recon; sid:200000689; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksonrunning.shop",nocase; classtype:attempted-recon; sid:200000690; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksprime.top",nocase; classtype:attempted-recon; sid:200000691; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrevel.top",nocase; classtype:attempted-recon; sid:200000692; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunble.top",nocase; classtype:attempted-recon; sid:200000693; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunhappy.cn",nocase; classtype:attempted-recon; sid:200000694; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunningonline.com",nocase; classtype:attempted-recon; sid:200000695; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunshoeshopping.top",nocase; classtype:attempted-recon; sid:200000696; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshopsft.top",nocase; classtype:attempted-recon; sid:200000697; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookssoft.top",nocase; classtype:attempted-recon; sid:200000698; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bruno-genthial.mykajabi.com",nocase; classtype:attempted-recon; sid:200000699; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsd405xx.weebly.com",nocase; classtype:attempted-recon; sid:200000700; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btbusinessbilling.wordpress.com",nocase; classtype:attempted-recon; sid:200000701; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-109798.square.site",nocase; classtype:attempted-recon; sid:200000702; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnectfilesecurebthomelogindropboxinupdatetdropboxpdf-logss.yolasite.com",nocase; classtype:attempted-recon; sid:200000703; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnectfilesecurebthomelogindropboxlinkupdatetdropboxpdf-logs.yolasite.com",nocase; classtype:attempted-recon; sid:200000704; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnectfilesecurebthomeloginpdropboxupdatepdf-logsssss-websit.yolasite.com",nocase; classtype:attempted-recon; sid:200000705; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnectfilesecurebthomesloginpdropboxupdatepdf-logsssss-websi.yolasite.com",nocase; classtype:attempted-recon; sid:200000706; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bthak.com",nocase; classtype:attempted-recon; sid:200000707; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bttwgs.cf",nocase; classtype:attempted-recon; sid:200000708; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"budrimon.xyz",nocase; classtype:attempted-recon; sid:200000709; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bufetemontoya.com",nocase; classtype:attempted-recon; sid:200000710; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"builmon.xyz",nocase; classtype:attempted-recon; sid:200000711; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bujikena.web.app",nocase; classtype:attempted-recon; sid:200000712; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buruan-ambil-hadiah-kalian-dari-abang.duckdns.org",nocase; classtype:attempted-recon; sid:200000713; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"busanopen.org",nocase; classtype:attempted-recon; sid:200000714; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buscacompleta.online",nocase; classtype:attempted-recon; sid:200000715; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buscadeatividades.online",nocase; classtype:attempted-recon; sid:200000716; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-appeal-copyright81721.web.app",nocase; classtype:attempted-recon; sid:200000717; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-appeal-verify1982112.web.app",nocase; classtype:attempted-recon; sid:200000718; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal192921.web.app",nocase; classtype:attempted-recon; sid:200000719; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-verified12985.web.app",nocase; classtype:attempted-recon; sid:200000720; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-restrict-appeal91782.web.app",nocase; classtype:attempted-recon; sid:200000721; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"businessemailss.biz",nocase; classtype:attempted-recon; sid:200000722; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"busrez.com",nocase; classtype:attempted-recon; sid:200000723; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bviprobono.org",nocase; classtype:attempted-recon; sid:200000724; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.curiousmorty.be",nocase; classtype:attempted-recon; sid:200000725; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.loveawaits.be",nocase; classtype:attempted-recon; sid:200000726; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.mail.com",nocase; classtype:attempted-recon; sid:200000727; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0mf1rm4t10n-1d3nt1tys.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000728; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0mf1rm4t10n-s3rv1c3p4g3s.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000729; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0mf1rm4t10n-s3rv1c3sc3nt3r.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000730; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0mf1rm4t10ns-p4g3r3p0rt3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000731; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0nf1rm4t10n-3m41ls3cur3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000732; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0nf1rm4t10n-r3p0rtp4g3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000733; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1christine.tjelmeland2e.cso.gov.tt",nocase; classtype:attempted-recon; sid:200000734; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2dc5b99.chgmar.pages.dev",nocase; classtype:attempted-recon; sid:200000735; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c6ebv708.caspio.com",nocase; classtype:attempted-recon; sid:200000736; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cabsiler.com",nocase; classtype:attempted-recon; sid:200000737; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cache.nebula.phx3.secureserver.net",nocase; classtype:attempted-recon; sid:200000738; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cadeau-orange.fr",nocase; classtype:attempted-recon; sid:200000739; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cafe-click.com",nocase; classtype:attempted-recon; sid:200000740; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixaseguradora.quadientcloud.com",nocase; classtype:attempted-recon; sid:200000741; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cambalkoncum.net",nocase; classtype:attempted-recon; sid:200000742; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cammymiller.com",nocase; classtype:attempted-recon; sid:200000743; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canadapost.reschedule.online.portal.services.parcel01868972.mh-group.net",nocase; classtype:attempted-recon; sid:200000744; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cancel3987591-binance-com.web.app",nocase; classtype:attempted-recon; sid:200000745; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canceldevice-verification.com",nocase; classtype:attempted-recon; sid:200000746; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cannabismart.uk",nocase; classtype:attempted-recon; sid:200000747; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capac.ru",nocase; classtype:attempted-recon; sid:200000748; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capservice.online",nocase; classtype:attempted-recon; sid:200000749; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caracasmateriais.blogspot.com",nocase; classtype:attempted-recon; sid:200000750; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carpediemxp.com",nocase; classtype:attempted-recon; sid:200000751; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cartamorin-geometres.fr",nocase; classtype:attempted-recon; sid:200000752; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carwash.tv",nocase; classtype:attempted-recon; sid:200000753; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caseid4785055283customerservice.blogspot.com",nocase; classtype:attempted-recon; sid:200000754; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caso1eb1118347493.atsnx.com",nocase; classtype:attempted-recon; sid:200000755; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catalogue-orange.com",nocase; classtype:attempted-recon; sid:200000756; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cateringfoodanddrinksupplies777.business.site",nocase; classtype:attempted-recon; sid:200000757; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catus.cat",nocase; classtype:attempted-recon; sid:200000758; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caycos.beispielseite-wmka.de",nocase; classtype:attempted-recon; sid:200000759; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caymanreno.com",nocase; classtype:attempted-recon; sid:200000760; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbmonlinegroups.com",nocase; classtype:attempted-recon; sid:200000761; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cce.2yq.pa-tarutung.go.id",nocase; classtype:attempted-recon; sid:200000762; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccjrlaw.com",nocase; classtype:attempted-recon; sid:200000763; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"celikoglumakina.com",nocase; classtype:attempted-recon; sid:200000764; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cema-fossano.it",nocase; classtype:attempted-recon; sid:200000765; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"centralconsulta.link",nocase; classtype:attempted-recon; sid:200000766; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"centralfreightlogistics.com",nocase; classtype:attempted-recon; sid:200000767; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"centre1.bubbleapps.io",nocase; classtype:attempted-recon; sid:200000768; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ceregister.org",nocase; classtype:attempted-recon; sid:200000769; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ceresgulf.com",nocase; classtype:attempted-recon; sid:200000770; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"certifica-montepaschii.com",nocase; classtype:attempted-recon; sid:200000771; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat-whatasapp.com",nocase; classtype:attempted-recon; sid:200000772; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat-whatsapp-grupo-invitacion.blogspot.com",nocase; classtype:attempted-recon; sid:200000773; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat-whatsappp-bokepindo22.duckdns.org",nocase; classtype:attempted-recon; sid:200000774; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat-whatsappp-com-grupxnxx22.duckdns.org",nocase; classtype:attempted-recon; sid:200000775; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chatwhatspp.duckdns.org",nocase; classtype:attempted-recon; sid:200000776; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chavzc.com",nocase; classtype:attempted-recon; sid:200000777; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill1.web.app",nocase; classtype:attempted-recon; sid:200000778; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill10.web.app",nocase; classtype:attempted-recon; sid:200000779; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill11.web.app",nocase; classtype:attempted-recon; sid:200000780; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill12.web.app",nocase; classtype:attempted-recon; sid:200000781; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill13.web.app",nocase; classtype:attempted-recon; sid:200000782; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill14.web.app",nocase; classtype:attempted-recon; sid:200000783; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill15.web.app",nocase; classtype:attempted-recon; sid:200000784; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill17.web.app",nocase; classtype:attempted-recon; sid:200000785; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill18.web.app",nocase; classtype:attempted-recon; sid:200000786; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill2.web.app",nocase; classtype:attempted-recon; sid:200000787; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill20.web.app",nocase; classtype:attempted-recon; sid:200000788; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill21.web.app",nocase; classtype:attempted-recon; sid:200000789; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill22.web.app",nocase; classtype:attempted-recon; sid:200000790; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill23.web.app",nocase; classtype:attempted-recon; sid:200000791; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill24.web.app",nocase; classtype:attempted-recon; sid:200000792; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill25.web.app",nocase; classtype:attempted-recon; sid:200000793; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill3.web.app",nocase; classtype:attempted-recon; sid:200000794; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill4.web.app",nocase; classtype:attempted-recon; sid:200000795; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill6.web.app",nocase; classtype:attempted-recon; sid:200000796; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill8.web.app",nocase; classtype:attempted-recon; sid:200000797; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chckmaill9.web.app",nocase; classtype:attempted-recon; sid:200000798; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkkeyvip.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000799; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000800; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit1.web.app",nocase; classtype:attempted-recon; sid:200000801; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit101.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000802; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit101.web.app",nocase; classtype:attempted-recon; sid:200000803; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit102.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000804; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit102.web.app",nocase; classtype:attempted-recon; sid:200000805; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit103.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000806; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit103.web.app",nocase; classtype:attempted-recon; sid:200000807; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit104.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000808; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit104.web.app",nocase; classtype:attempted-recon; sid:200000809; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit105.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000810; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit106.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000811; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit107.web.app",nocase; classtype:attempted-recon; sid:200000812; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit108.web.app",nocase; classtype:attempted-recon; sid:200000813; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit109.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000814; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit109.web.app",nocase; classtype:attempted-recon; sid:200000815; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit11.web.app",nocase; classtype:attempted-recon; sid:200000816; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit110.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000817; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit110.web.app",nocase; classtype:attempted-recon; sid:200000818; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit111.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000819; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit112.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000820; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit114.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000821; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit114.web.app",nocase; classtype:attempted-recon; sid:200000822; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit115.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000823; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit115.web.app",nocase; classtype:attempted-recon; sid:200000824; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit116.web.app",nocase; classtype:attempted-recon; sid:200000825; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit117.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000826; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit117.web.app",nocase; classtype:attempted-recon; sid:200000827; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit118.web.app",nocase; classtype:attempted-recon; sid:200000828; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit119.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000829; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000830; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit12.web.app",nocase; classtype:attempted-recon; sid:200000831; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit120.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000832; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit120.web.app",nocase; classtype:attempted-recon; sid:200000833; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit121.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000834; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit121.web.app",nocase; classtype:attempted-recon; sid:200000835; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit122.web.app",nocase; classtype:attempted-recon; sid:200000836; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit123.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000837; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit127.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000838; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit127.web.app",nocase; classtype:attempted-recon; sid:200000839; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit128.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000840; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit128.web.app",nocase; classtype:attempted-recon; sid:200000841; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit129.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000842; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000843; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit13.web.app",nocase; classtype:attempted-recon; sid:200000844; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit130.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000845; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit130.web.app",nocase; classtype:attempted-recon; sid:200000846; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit131.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000847; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit131.web.app",nocase; classtype:attempted-recon; sid:200000848; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit132.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000849; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit132.web.app",nocase; classtype:attempted-recon; sid:200000850; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit133.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000851; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit133.web.app",nocase; classtype:attempted-recon; sid:200000852; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit134.web.app",nocase; classtype:attempted-recon; sid:200000853; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit135.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000854; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit135.web.app",nocase; classtype:attempted-recon; sid:200000855; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit136.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000856; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit137.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000857; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit137.web.app",nocase; classtype:attempted-recon; sid:200000858; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit138.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000859; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000860; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit14.web.app",nocase; classtype:attempted-recon; sid:200000861; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit140.web.app",nocase; classtype:attempted-recon; sid:200000862; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit141.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000863; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit141.web.app",nocase; classtype:attempted-recon; sid:200000864; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit142.web.app",nocase; classtype:attempted-recon; sid:200000865; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit143.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000866; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit143.web.app",nocase; classtype:attempted-recon; sid:200000867; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit144.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000868; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit144.web.app",nocase; classtype:attempted-recon; sid:200000869; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit146.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000870; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit146.web.app",nocase; classtype:attempted-recon; sid:200000871; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit147.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000872; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit147.web.app",nocase; classtype:attempted-recon; sid:200000873; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit149.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000874; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit149.web.app",nocase; classtype:attempted-recon; sid:200000875; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit15.web.app",nocase; classtype:attempted-recon; sid:200000876; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit150.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000877; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit150.web.app",nocase; classtype:attempted-recon; sid:200000878; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit151.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000879; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit152.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000880; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit152.web.app",nocase; classtype:attempted-recon; sid:200000881; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit153.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000882; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit153.web.app",nocase; classtype:attempted-recon; sid:200000883; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit154.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000884; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit155.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000885; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit156.web.app",nocase; classtype:attempted-recon; sid:200000886; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit158.web.app",nocase; classtype:attempted-recon; sid:200000887; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit159.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000888; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit159.web.app",nocase; classtype:attempted-recon; sid:200000889; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000890; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit16.web.app",nocase; classtype:attempted-recon; sid:200000891; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit161.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000892; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit161.web.app",nocase; classtype:attempted-recon; sid:200000893; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit162.web.app",nocase; classtype:attempted-recon; sid:200000894; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit163.web.app",nocase; classtype:attempted-recon; sid:200000895; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit164.web.app",nocase; classtype:attempted-recon; sid:200000896; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit166.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000897; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit167.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000898; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit167.web.app",nocase; classtype:attempted-recon; sid:200000899; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit168.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000900; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit168.web.app",nocase; classtype:attempted-recon; sid:200000901; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit169.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000902; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit170.web.app",nocase; classtype:attempted-recon; sid:200000903; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit171.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000904; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit172.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000905; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit174.web.app",nocase; classtype:attempted-recon; sid:200000906; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit176.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000907; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit177.web.app",nocase; classtype:attempted-recon; sid:200000908; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit178.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000909; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit179.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000910; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000911; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit18.web.app",nocase; classtype:attempted-recon; sid:200000912; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit180.web.app",nocase; classtype:attempted-recon; sid:200000913; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit181.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000914; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit182.web.app",nocase; classtype:attempted-recon; sid:200000915; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit183.web.app",nocase; classtype:attempted-recon; sid:200000916; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit184.web.app",nocase; classtype:attempted-recon; sid:200000917; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit185.web.app",nocase; classtype:attempted-recon; sid:200000918; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit186.web.app",nocase; classtype:attempted-recon; sid:200000919; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit187.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000920; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit187.web.app",nocase; classtype:attempted-recon; sid:200000921; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit188.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000922; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit189.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000923; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000924; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit19.web.app",nocase; classtype:attempted-recon; sid:200000925; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit191.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000926; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit191.web.app",nocase; classtype:attempted-recon; sid:200000927; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit192.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000928; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit192.web.app",nocase; classtype:attempted-recon; sid:200000929; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit193.web.app",nocase; classtype:attempted-recon; sid:200000930; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit194.web.app",nocase; classtype:attempted-recon; sid:200000931; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit195.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000932; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit195.web.app",nocase; classtype:attempted-recon; sid:200000933; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit196.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000934; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit196.web.app",nocase; classtype:attempted-recon; sid:200000935; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit199.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000936; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit199.web.app",nocase; classtype:attempted-recon; sid:200000937; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000938; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit20.web.app",nocase; classtype:attempted-recon; sid:200000939; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000940; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit21.web.app",nocase; classtype:attempted-recon; sid:200000941; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit23.web.app",nocase; classtype:attempted-recon; sid:200000942; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000943; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit24.web.app",nocase; classtype:attempted-recon; sid:200000944; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000945; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit25.web.app",nocase; classtype:attempted-recon; sid:200000946; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit26.web.app",nocase; classtype:attempted-recon; sid:200000947; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000948; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000949; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000950; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit31.web.app",nocase; classtype:attempted-recon; sid:200000951; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit32.web.app",nocase; classtype:attempted-recon; sid:200000952; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000953; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000954; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit34.web.app",nocase; classtype:attempted-recon; sid:200000955; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000956; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit37.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000957; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit38.web.app",nocase; classtype:attempted-recon; sid:200000958; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000959; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000960; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit40.web.app",nocase; classtype:attempted-recon; sid:200000961; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit41.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000962; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit41.web.app",nocase; classtype:attempted-recon; sid:200000963; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit42.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000964; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit42.web.app",nocase; classtype:attempted-recon; sid:200000965; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000966; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit43.web.app",nocase; classtype:attempted-recon; sid:200000967; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000968; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000969; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit45.web.app",nocase; classtype:attempted-recon; sid:200000970; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000971; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit46.web.app",nocase; classtype:attempted-recon; sid:200000972; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit47.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000973; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit47.web.app",nocase; classtype:attempted-recon; sid:200000974; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000975; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit48.web.app",nocase; classtype:attempted-recon; sid:200000976; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000977; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000978; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit50.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000979; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit51.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000980; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000981; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit53.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000982; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit54.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000983; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit54.web.app",nocase; classtype:attempted-recon; sid:200000984; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit56.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000985; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit57.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000986; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit57.web.app",nocase; classtype:attempted-recon; sid:200000987; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit58.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000988; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit59.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000989; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit59.web.app",nocase; classtype:attempted-recon; sid:200000990; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit61.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000991; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit61.web.app",nocase; classtype:attempted-recon; sid:200000992; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000993; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit62.web.app",nocase; classtype:attempted-recon; sid:200000994; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit63.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000995; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit63.web.app",nocase; classtype:attempted-recon; sid:200000996; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit64.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000997; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit64.web.app",nocase; classtype:attempted-recon; sid:200000998; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit65.web.app",nocase; classtype:attempted-recon; sid:200000999; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit66.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001000; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001001; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit67.web.app",nocase; classtype:attempted-recon; sid:200001002; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit68.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001003; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit68.web.app",nocase; classtype:attempted-recon; sid:200001004; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001005; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit7.web.app",nocase; classtype:attempted-recon; sid:200001006; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit71.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001007; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit72.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001008; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit72.web.app",nocase; classtype:attempted-recon; sid:200001009; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001010; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit74.web.app",nocase; classtype:attempted-recon; sid:200001011; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit75.web.app",nocase; classtype:attempted-recon; sid:200001012; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001013; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit76.web.app",nocase; classtype:attempted-recon; sid:200001014; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit77.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001015; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit79.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001016; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit80.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001017; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit80.web.app",nocase; classtype:attempted-recon; sid:200001018; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit82.web.app",nocase; classtype:attempted-recon; sid:200001019; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001020; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit83.web.app",nocase; classtype:attempted-recon; sid:200001021; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit84.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001022; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit85.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001023; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit86.web.app",nocase; classtype:attempted-recon; sid:200001024; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit88.web.app",nocase; classtype:attempted-recon; sid:200001025; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001026; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit89.web.app",nocase; classtype:attempted-recon; sid:200001027; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001028; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit9.web.app",nocase; classtype:attempted-recon; sid:200001029; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit91.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001030; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit91.web.app",nocase; classtype:attempted-recon; sid:200001031; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit92.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001032; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit93.web.app",nocase; classtype:attempted-recon; sid:200001033; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit94.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001034; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit95.web.app",nocase; classtype:attempted-recon; sid:200001035; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit96.web.app",nocase; classtype:attempted-recon; sid:200001036; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit97.web.app",nocase; classtype:attempted-recon; sid:200001037; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmailhakbukhit99.web.app",nocase; classtype:attempted-recon; sid:200001038; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chefsenaccion.org",nocase; classtype:attempted-recon; sid:200001039; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chianteck.com",nocase; classtype:attempted-recon; sid:200001040; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chikkuthomas.github.io",nocase; classtype:attempted-recon; sid:200001041; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chinagatelb.com",nocase; classtype:attempted-recon; sid:200001042; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chinmayavidyalayarspuram.com",nocase; classtype:attempted-recon; sid:200001043; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiragrajoria.github.io",nocase; classtype:attempted-recon; sid:200001044; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chois.jp",nocase; classtype:attempted-recon; sid:200001045; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"christianrehabnetwork.com",nocase; classtype:attempted-recon; sid:200001046; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"christmas-dhl-express-delvr.hopekosmos.com",nocase; classtype:attempted-recon; sid:200001047; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"churchofspirituallife.org",nocase; classtype:attempted-recon; sid:200001048; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chutomen.com",nocase; classtype:attempted-recon; sid:200001049; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cinemaleftech.com",nocase; classtype:attempted-recon; sid:200001050; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citagestionenlineabn.com",nocase; classtype:attempted-recon; sid:200001051; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citasbnenlinea.com",nocase; classtype:attempted-recon; sid:200001052; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citasgestionenlinea.com",nocase; classtype:attempted-recon; sid:200001053; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"city-of-jazz.de",nocase; classtype:attempted-recon; sid:200001054; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-cobra-75.duckdns.org",nocase; classtype:attempted-recon; sid:200001055; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-event-freefire-20-a4.duckdns.org",nocase; classtype:attempted-recon; sid:200001056; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-event-gratis-ini.duckdns.org",nocase; classtype:attempted-recon; sid:200001057; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-hadiah-freefire617.duckdns.org",nocase; classtype:attempted-recon; sid:200001058; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claims-funds-enczj.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200001059; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claimshopee.yolasite.com",nocase; classtype:attempted-recon; sid:200001060; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claro-link.brsafe.com.br",nocase; classtype:attempted-recon; sid:200001061; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claus.bz",nocase; classtype:attempted-recon; sid:200001062; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clientid-h5p8n7f9e6fbmkhbr3i4gbnia7e9zpts4nbk3ebk0zj625t2ol.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200001063; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clientid-ij66191jgbm96ujp40bz1gzmpc8iquhoff3ocmbrzs6g5i89t0.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200001064; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clients.devtux.com",nocase; classtype:attempted-recon; sid:200001065; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clim-ml-evnt-2022-a4.duckdns.org",nocase; classtype:attempted-recon; sid:200001066; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloakanw.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200001067; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clone-7473c.web.app",nocase; classtype:attempted-recon; sid:200001068; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"closingdocs9480.myportfolio.com",nocase; classtype:attempted-recon; sid:200001069; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-object-storage-o9-cos-static-web-hocsx2.pages.dev",nocase; classtype:attempted-recon; sid:200001070; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud.go4clients.com",nocase; classtype:attempted-recon; sid:200001071; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud102.hostgator.com",nocase; classtype:attempted-recon; sid:200001072; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001073; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudflare-rbnuo.run.goorm.io",nocase; classtype:attempted-recon; sid:200001074; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudgeardesign.com",nocase; classtype:attempted-recon; sid:200001075; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudtracker.com.br",nocase; classtype:attempted-recon; sid:200001076; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"club.quomodo.com",nocase; classtype:attempted-recon; sid:200001077; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clubeamigosdopedrosegundo.com.br",nocase; classtype:attempted-recon; sid:200001078; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cmaplc.com.au",nocase; classtype:attempted-recon; sid:200001079; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cner283829.odoo.com",nocase; classtype:attempted-recon; sid:200001080; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"co.jp.0dyttda.cn",nocase; classtype:attempted-recon; sid:200001081; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"co.jp.rsczkmd.cn",nocase; classtype:attempted-recon; sid:200001082; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"co.jp.udpvnra.cn",nocase; classtype:attempted-recon; sid:200001083; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"co.jp.xyuueqx.cn",nocase; classtype:attempted-recon; sid:200001084; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coae.mloescb.com",nocase; classtype:attempted-recon; sid:200001085; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coda-shopp-65.duckdns.org",nocase; classtype:attempted-recon; sid:200001086; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codwarzonemobile.com",nocase; classtype:attempted-recon; sid:200001087; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cohosan.com",nocase; classtype:attempted-recon; sid:200001088; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbase-wallet-defi.com",nocase; classtype:attempted-recon; sid:200001089; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"collab-land.net",nocase; classtype:attempted-recon; sid:200001090; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"collabland.info",nocase; classtype:attempted-recon; sid:200001091; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"collectm3.com",nocase; classtype:attempted-recon; sid:200001092; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"com-az.ru",nocase; classtype:attempted-recon; sid:200001093; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"com-rse.ru",nocase; classtype:attempted-recon; sid:200001094; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"com-xl66fhek.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200001095; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"community.fb-pages-01138913366342885284.qf4owyef2n-xoy4w7wpr6pw.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001096; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"community.fb-pages-28202553629866144006.qf4owyef2n-xoy4w7wpr6pw.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001097; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"community.fb-pages-44883444930165123303.qf4owyef2n-xoy4w7wpr6pw.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001098; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comtecoinc.com",nocase; classtype:attempted-recon; sid:200001099; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"congresosba.com.ar",nocase; classtype:attempted-recon; sid:200001100; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conhecaonlinedigital.com.br",nocase; classtype:attempted-recon; sid:200001101; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-walletdapps.com",nocase; classtype:attempted-recon; sid:200001102; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect.au-login.sqbosheng.com",nocase; classtype:attempted-recon; sid:200001103; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect.au-login.taoniu888.com",nocase; classtype:attempted-recon; sid:200001104; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectingmymeta.com",nocase; classtype:attempted-recon; sid:200001105; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectwallet.me",nocase; classtype:attempted-recon; sid:200001106; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consent.clarosgvas.mobicare.com.br",nocase; classtype:attempted-recon; sid:200001107; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consiguinadobanparacard.com",nocase; classtype:attempted-recon; sid:200001108; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contabilidaderabello.com.br",nocase; classtype:attempted-recon; sid:200001109; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact2acceptpoilcyverifingyouracceptancemailfullinbox.pages.dev",nocase; classtype:attempted-recon; sid:200001110; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contapessoal.digital",nocase; classtype:attempted-recon; sid:200001111; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"continue-to-posb.herokuapp.com",nocase; classtype:attempted-recon; sid:200001112; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contratodeparceria.com.br",nocase; classtype:attempted-recon; sid:200001113; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-center-live.ml",nocase; classtype:attempted-recon; sid:200001114; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"corepetrophysics.com",nocase; classtype:attempted-recon; sid:200001115; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos-adjust5.es.swtest.ru",nocase; classtype:attempted-recon; sid:200001116; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos-cargo83.es.swtest.ru",nocase; classtype:attempted-recon; sid:200001117; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos.detalle-tracking.nednelo.com",nocase; classtype:attempted-recon; sid:200001118; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"corta.ai",nocase; classtype:attempted-recon; sid:200001119; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cottonrze.com",nocase; classtype:attempted-recon; sid:200001120; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cottonwooddentalg.nimbusweb.me",nocase; classtype:attempted-recon; sid:200001121; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"courtcase.co.in",nocase; classtype:attempted-recon; sid:200001122; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"covid-foyyn.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200001123; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cox0.yolasite.com",nocase; classtype:attempted-recon; sid:200001124; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coxdevicesxdomain.weebly.com",nocase; classtype:attempted-recon; sid:200001125; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coxdomain-verification1.weebly.com",nocase; classtype:attempted-recon; sid:200001126; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coxmailernet.weebly.com",nocase; classtype:attempted-recon; sid:200001127; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coxxdessigns.weebly.com",nocase; classtype:attempted-recon; sid:200001128; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cp.digitalprocurements.co.uk",nocase; classtype:attempted-recon; sid:200001129; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cp45362.tmweb.ru",nocase; classtype:attempted-recon; sid:200001130; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpanel10wh.bkk1.cloud.z.com",nocase; classtype:attempted-recon; sid:200001131; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpbusinesscenters.org",nocase; classtype:attempted-recon; sid:200001132; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crackfreekey.com",nocase; classtype:attempted-recon; sid:200001133; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cranetech.com.br",nocase; classtype:attempted-recon; sid:200001134; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crc-nacional-valid.atwebpages.com",nocase; classtype:attempted-recon; sid:200001135; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crcnewbn.atwebpages.com",nocase; classtype:attempted-recon; sid:200001136; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crcnewwconfirmm.atwebpages.com",nocase; classtype:attempted-recon; sid:200001137; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cred-bd.com",nocase; classtype:attempted-recon; sid:200001138; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credcloud-object-storage-o9-cos-static-web-hocsd3d.pages.dev",nocase; classtype:attempted-recon; sid:200001139; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credicorp-capital.net",nocase; classtype:attempted-recon; sid:200001140; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credicorpfiduciariasa.com",nocase; classtype:attempted-recon; sid:200001141; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credifinanciera.didacsis.com",nocase; classtype:attempted-recon; sid:200001142; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crediserfinanza.com",nocase; classtype:attempted-recon; sid:200001143; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credit-agrigol.co",nocase; classtype:attempted-recon; sid:200001144; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credit-agrigol.info",nocase; classtype:attempted-recon; sid:200001145; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credit-agrigol.us",nocase; classtype:attempted-recon; sid:200001146; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credit-agrigol.xyz",nocase; classtype:attempted-recon; sid:200001147; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.ba",nocase; classtype:attempted-recon; sid:200001148; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.com",nocase; classtype:attempted-recon; sid:200001149; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.ro",nocase; classtype:attempted-recon; sid:200001150; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditinternationalbank.com",nocase; classtype:attempted-recon; sid:200001151; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditiperhabbogratissicuro100.blogspot.it",nocase; classtype:attempted-recon; sid:200001152; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"criticalcarevizag.com",nocase; classtype:attempted-recon; sid:200001153; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crome-add-exstemsion-online.com",nocase; classtype:attempted-recon; sid:200001154; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crome-add-exstennsiom-online.com",nocase; classtype:attempted-recon; sid:200001155; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cruve.financial",nocase; classtype:attempted-recon; sid:200001156; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryploplanes.me",nocase; classtype:attempted-recon; sid:200001157; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crypto-support.org",nocase; classtype:attempted-recon; sid:200001158; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocar.biz",nocase; classtype:attempted-recon; sid:200001159; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocarsme.com",nocase; classtype:attempted-recon; sid:200001160; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocarspro.com",nocase; classtype:attempted-recon; sid:200001161; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptoplanes.top",nocase; classtype:attempted-recon; sid:200001162; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crytorectify.net",nocase; classtype:attempted-recon; sid:200001163; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csmagrkego.ru",nocase; classtype:attempted-recon; sid:200001164; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cu26156.tmweb.ru",nocase; classtype:attempted-recon; sid:200001165; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyupgrade.mystrikingly.com",nocase; classtype:attempted-recon; sid:200001166; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customerserverice.yolasite.com",nocase; classtype:attempted-recon; sid:200001167; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutting-harm-polyester-governmental.trycloudflare.com",nocase; classtype:attempted-recon; sid:200001168; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cv11965.tmweb.ru",nocase; classtype:attempted-recon; sid:200001169; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"czvon.4fan.cz",nocase; classtype:attempted-recon; sid:200001170; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app32150.xyz",nocase; classtype:attempted-recon; sid:200001171; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d2aae6a6.srvr-cloudmail-srvr675eu6r.pages.dev",nocase; classtype:attempted-recon; sid:200001172; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daatahomes.com",nocase; classtype:attempted-recon; sid:200001173; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"damp-f43e.recovery-page-secur.workers.dev",nocase; classtype:attempted-recon; sid:200001174; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dandolier.com",nocase; classtype:attempted-recon; sid:200001175; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"danitraseoexperts.com",nocase; classtype:attempted-recon; sid:200001176; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappsauthe-validatorportal.site",nocase; classtype:attempted-recon; sid:200001177; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappschronize.com",nocase; classtype:attempted-recon; sid:200001178; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davivienda-sitioseguro-portal.co",nocase; classtype:attempted-recon; sid:200001179; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davivienda-sitioseguro-portal.xyz",nocase; classtype:attempted-recon; sid:200001180; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daviviendaonline.codigogym.club",nocase; classtype:attempted-recon; sid:200001181; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daviviendasitio.com",nocase; classtype:attempted-recon; sid:200001182; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawn-pine-5b7f.pedro-campos1093.workers.dev",nocase; classtype:attempted-recon; sid:200001183; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daycoval.contrato.srv.br",nocase; classtype:attempted-recon; sid:200001184; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daycoval.facildepagar.com.br",nocase; classtype:attempted-recon; sid:200001185; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbesmdcjzturhizszllesbthsn-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001186; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbho7wn.cn",nocase; classtype:attempted-recon; sid:200001187; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbw.gr",nocase; classtype:attempted-recon; sid:200001188; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dcm1.ae.iwc.static.tungmung.co.id",nocase; classtype:attempted-recon; sid:200001189; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dd90001.github.io",nocase; classtype:attempted-recon; sid:200001190; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"de.eurohome.civ.pl",nocase; classtype:attempted-recon; sid:200001191; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"de22c9kukppr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001192; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deactivemsnon-8k98-l9k8-98j8-98j78u.pages.dev",nocase; classtype:attempted-recon; sid:200001193; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dealmegood.com",nocase; classtype:attempted-recon; sid:200001194; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deborahholland.net",nocase; classtype:attempted-recon; sid:200001195; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"debuil.xyz",nocase; classtype:attempted-recon; sid:200001196; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"declicgestion.fr",nocase; classtype:attempted-recon; sid:200001197; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decorcenter.com.pe",nocase; classtype:attempted-recon; sid:200001198; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-appsolution.com",nocase; classtype:attempted-recon; sid:200001199; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defikingdoms-global.net",nocase; classtype:attempted-recon; sid:200001200; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dejpaad.com",nocase; classtype:attempted-recon; sid:200001201; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delacproperties.com.mx",nocase; classtype:attempted-recon; sid:200001202; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delezhen.mashalezhen.com",nocase; classtype:attempted-recon; sid:200001203; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delfixty4202.atsnx.com",nocase; classtype:attempted-recon; sid:200001204; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delhiescort69.com",nocase; classtype:attempted-recon; sid:200001205; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deltaairlinecourier.com",nocase; classtype:attempted-recon; sid:200001206; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demallplot-tra.web.app",nocase; classtype:attempted-recon; sid:200001207; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demiregalos.com.ar",nocase; classtype:attempted-recon; sid:200001208; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.bradescocontrol.vertitecnologia.com.br",nocase; classtype:attempted-recon; sid:200001209; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo2.cloudwp.dev",nocase; classtype:attempted-recon; sid:200001210; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dep453t707.ru",nocase; classtype:attempted-recon; sid:200001211; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deregister-lbpayee.com",nocase; classtype:attempted-recon; sid:200001212; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"descarados.com",nocase; classtype:attempted-recon; sid:200001213; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desejoourocard.com.br",nocase; classtype:attempted-recon; sid:200001214; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"designerlakehouse.com",nocase; classtype:attempted-recon; sid:200001215; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deutsche-service-gov.com",nocase; classtype:attempted-recon; sid:200001216; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deutschepost.epostservey.com",nocase; classtype:attempted-recon; sid:200001217; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-nadaj.orlenpaczka.ce5.pl",nocase; classtype:attempted-recon; sid:200001218; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-patru.pantheonsite.io",nocase; classtype:attempted-recon; sid:200001219; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-www.orlenpaczka.ce5.pl",nocase; classtype:attempted-recon; sid:200001220; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.shivaxi.com",nocase; classtype:attempted-recon; sid:200001221; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"devops.help",nocase; classtype:attempted-recon; sid:200001222; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfhytjukert.000webhostapp.com",nocase; classtype:attempted-recon; sid:200001223; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfoodsnet.myportfolio.com",nocase; classtype:attempted-recon; sid:200001224; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgi.is",nocase; classtype:attempted-recon; sid:200001225; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhanushr24.github.io",nocase; classtype:attempted-recon; sid:200001226; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhl-australia.blogspot.com",nocase; classtype:attempted-recon; sid:200001227; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhl-event.app",nocase; classtype:attempted-recon; sid:200001228; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhlesgmarketing.com",nocase; classtype:attempted-recon; sid:200001229; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diamond-gratis24.duckdns.org",nocase; classtype:attempted-recon; sid:200001230; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"die-post-swiss-id-19782635812.psd2any.com",nocase; classtype:attempted-recon; sid:200001231; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diginto.org",nocase; classtype:attempted-recon; sid:200001232; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dischrdapp.com",nocase; classtype:attempted-recon; sid:200001233; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discode.gift",nocase; classtype:attempted-recon; sid:200001234; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discord-application-moderators.xyz",nocase; classtype:attempted-recon; sid:200001235; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discord-eventshypesquad.com",nocase; classtype:attempted-recon; sid:200001236; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discord-gi.com",nocase; classtype:attempted-recon; sid:200001237; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discord-giftsteam.com",nocase; classtype:attempted-recon; sid:200001238; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discord-gives.ru",nocase; classtype:attempted-recon; sid:200001239; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disgordapp.com",nocase; classtype:attempted-recon; sid:200001240; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dispositivoapp.azurewebsites.net",nocase; classtype:attempted-recon; sid:200001241; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"distinctivei.com",nocase; classtype:attempted-recon; sid:200001242; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"distrial.ec",nocase; classtype:attempted-recon; sid:200001243; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"djfh.wmfc241.cn",nocase; classtype:attempted-recon; sid:200001244; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-info.com",nocase; classtype:attempted-recon; sid:200001245; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-kundensicherheit.de",nocase; classtype:attempted-recon; sid:200001246; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkbtan07.com",nocase; classtype:attempted-recon; sid:200001247; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkglobaljobs.com",nocase; classtype:attempted-recon; sid:200001248; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dl.9xu.com",nocase; classtype:attempted-recon; sid:200001249; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlink.me",nocase; classtype:attempted-recon; sid:200001250; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscord-free.com",nocase; classtype:attempted-recon; sid:200001251; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscord-giv.com",nocase; classtype:attempted-recon; sid:200001252; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dm2.opq.pa-tarutung.go.id",nocase; classtype:attempted-recon; sid:200001253; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmaxpesca.com.es",nocase; classtype:attempted-recon; sid:200001254; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doclab-console-auth.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001255; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doclab-console-auth.web.app",nocase; classtype:attempted-recon; sid:200001256; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs-verify-c671.thajetiase.workers.dev",nocase; classtype:attempted-recon; sid:200001257; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.revv.so",nocase; classtype:attempted-recon; sid:200001258; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001259; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.web.app",nocase; classtype:attempted-recon; sid:200001260; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docuservice.us",nocase; classtype:attempted-recon; sid:200001261; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docusign-lnc.info",nocase; classtype:attempted-recon; sid:200001262; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domaincontroller.pmeimg.co.uk",nocase; classtype:attempted-recon; sid:200001263; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doriancarvajal.com",nocase; classtype:attempted-recon; sid:200001264; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dorouscom.com",nocase; classtype:attempted-recon; sid:200001265; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"douuodwoman.com",nocase; classtype:attempted-recon; sid:200001266; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dowaba-s2dhl.blogspot.com",nocase; classtype:attempted-recon; sid:200001267; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doz.tode.cz",nocase; classtype:attempted-recon; sid:200001268; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpasdasfasfasfas.pages.dev",nocase; classtype:attempted-recon; sid:200001269; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpd-redelivery-uk.com",nocase; classtype:attempted-recon; sid:200001270; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpfko-inv.web.app",nocase; classtype:attempted-recon; sid:200001271; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpmasdaskj.pages.dev",nocase; classtype:attempted-recon; sid:200001272; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drivingschoolglasgow.co.uk",nocase; classtype:attempted-recon; sid:200001273; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drmarciovaleriano.com.br",nocase; classtype:attempted-recon; sid:200001274; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsjijkfd.ml",nocase; classtype:attempted-recon; sid:200001275; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dskedirekt.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001276; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsp2codemdp.t.justns.ru",nocase; classtype:attempted-recon; sid:200001277; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dtpprtmwbtudyquwgytcqcthzc-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001278; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dtrpsystasfasgas.pages.dev",nocase; classtype:attempted-recon; sid:200001279; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dukhovnist.in.ua",nocase; classtype:attempted-recon; sid:200001280; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"durecorpperu.com",nocase; classtype:attempted-recon; sid:200001281; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwrat.andalous.org",nocase; classtype:attempted-recon; sid:200001282; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dydex.org",nocase; classtype:attempted-recon; sid:200001283; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dyn.co",nocase; classtype:attempted-recon; sid:200001284; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dynastyclinic.ae",nocase; classtype:attempted-recon; sid:200001285; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-cassare.org",nocase; classtype:attempted-recon; sid:200001286; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-dpost.de",nocase; classtype:attempted-recon; sid:200001287; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e4ff557e.sso-secure-mail04wtwdw4.pages.dev",nocase; classtype:attempted-recon; sid:200001288; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e4ra.byethost8.com",nocase; classtype:attempted-recon; sid:200001289; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e63q45f9h5fr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001290; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eagleeyeapparel.com",nocase; classtype:attempted-recon; sid:200001291; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"easydiili.fi",nocase; classtype:attempted-recon; sid:200001292; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eba0200d0c.nxcli.net",nocase; classtype:attempted-recon; sid:200001293; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebploos123085.atsnx.com",nocase; classtype:attempted-recon; sid:200001294; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecosteelsolution.ro",nocase; classtype:attempted-recon; sid:200001295; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edukickmexico.com",nocase; classtype:attempted-recon; sid:200001296; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ee-sms.co.uk",nocase; classtype:attempted-recon; sid:200001297; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efarms.com.ng",nocase; classtype:attempted-recon; sid:200001298; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eharmonyservice.com",nocase; classtype:attempted-recon; sid:200001299; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ehsjxgtoidrkfvvrsymjtukgci-dot-sp50otoot.nn.r.appspot.com",nocase; classtype:attempted-recon; sid:200001300; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eixoconsultoria.com",nocase; classtype:attempted-recon; sid:200001301; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ekabel.hu",nocase; classtype:attempted-recon; sid:200001302; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ekbofexjlnsdsfaqxbcfpnfift-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001303; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ekobebe.cn",nocase; classtype:attempted-recon; sid:200001304; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elated-montalcini-f7085b.netlify.app",nocase; classtype:attempted-recon; sid:200001305; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electricalpages.com",nocase; classtype:attempted-recon; sid:200001306; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electrocoolhvacr.com",nocase; classtype:attempted-recon; sid:200001307; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electronicanehuen.com",nocase; classtype:attempted-recon; sid:200001308; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elektroonline.pl",nocase; classtype:attempted-recon; sid:200001309; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ellatinodigital.com",nocase; classtype:attempted-recon; sid:200001310; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001311; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm36.web.app",nocase; classtype:attempted-recon; sid:200001312; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm71.web.app",nocase; classtype:attempted-recon; sid:200001313; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm72.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001314; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001315; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm75.web.app",nocase; classtype:attempted-recon; sid:200001316; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001317; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm78.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001318; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm79.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001319; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm79.web.app",nocase; classtype:attempted-recon; sid:200001320; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm82.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001321; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm82.web.app",nocase; classtype:attempted-recon; sid:200001322; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm84.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001323; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm85.web.app",nocase; classtype:attempted-recon; sid:200001324; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm86.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001325; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm86.web.app",nocase; classtype:attempted-recon; sid:200001326; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm87.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001327; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm87.web.app",nocase; classtype:attempted-recon; sid:200001328; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm88.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001329; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm89.web.app",nocase; classtype:attempted-recon; sid:200001330; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm91.web.app",nocase; classtype:attempted-recon; sid:200001331; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm93.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001332; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm93.web.app",nocase; classtype:attempted-recon; sid:200001333; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm97.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001334; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm97.web.app",nocase; classtype:attempted-recon; sid:200001335; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm98.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001336; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elngetmailchkdm99.web.app",nocase; classtype:attempted-recon; sid:200001337; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elomo.ro",nocase; classtype:attempted-recon; sid:200001338; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eluniversallatinworld.com",nocase; classtype:attempted-recon; sid:200001339; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email302.com",nocase; classtype:attempted-recon; sid:200001340; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailsettings.webflow.io",nocase; classtype:attempted-recon; sid:200001341; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emberlingerie.com.br",nocase; classtype:attempted-recon; sid:200001342; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emlink.me",nocase; classtype:attempted-recon; sid:200001343; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emojis.bons.bar",nocase; classtype:attempted-recon; sid:200001344; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emojis.dels.bar",nocase; classtype:attempted-recon; sid:200001345; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emotea.es",nocase; classtype:attempted-recon; sid:200001346; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empfangen-paket-post-ch.crawfordk.com",nocase; classtype:attempted-recon; sid:200001347; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emsi-lobo.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001348; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"en-template-solicito-16414253314897.onepage.website",nocase; classtype:attempted-recon; sid:200001349; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"en.vivuni.workers.dev",nocase; classtype:attempted-recon; sid:200001350; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enbolivia.com",nocase; classtype:attempted-recon; sid:200001351; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptdrive.booogle.net",nocase; classtype:attempted-recon; sid:200001352; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"engcamp.org",nocase; classtype:attempted-recon; sid:200001353; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enoman.fqzsdgtg.cn",nocase; classtype:attempted-recon; sid:200001354; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enxuga.com.br",nocase; classtype:attempted-recon; sid:200001355; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ershamshad.github.io",nocase; classtype:attempted-recon; sid:200001356; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esca4.app.goo.gl",nocase; classtype:attempted-recon; sid:200001357; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"escortinraipur.com",nocase; classtype:attempted-recon; sid:200001358; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eseax.ws",nocase; classtype:attempted-recon; sid:200001359; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esfdesentakip.com",nocase; classtype:attempted-recon; sid:200001360; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esi-texas.com",nocase; classtype:attempted-recon; sid:200001361; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esinnovativeinteriors.com",nocase; classtype:attempted-recon; sid:200001362; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"establecimientoscolonia-uy.com",nocase; classtype:attempted-recon; sid:200001363; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"estorneaqui.blogspot.com",nocase; classtype:attempted-recon; sid:200001364; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-meisfrq.xyz",nocase; classtype:attempted-recon; sid:200001365; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-uhfjk.monster",nocase; classtype:attempted-recon; sid:200001366; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc.7pvjh3uk.cn",nocase; classtype:attempted-recon; sid:200001367; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc.jp.anzhanfrp.cn",nocase; classtype:attempted-recon; sid:200001368; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc.kcjis.com",nocase; classtype:attempted-recon; sid:200001369; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc.mbve.cn",nocase; classtype:attempted-recon; sid:200001370; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc.oxqk.cn",nocase; classtype:attempted-recon; sid:200001371; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ether97-scndry21.duckdns.org",nocase; classtype:attempted-recon; sid:200001372; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethnictrendz.com",nocase; classtype:attempted-recon; sid:200001373; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eu-amazon-creturns.com",nocase; classtype:attempted-recon; sid:200001374; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eucriomeumundo.com",nocase; classtype:attempted-recon; sid:200001375; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eugnerally-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200001376; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eusa-lombo.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001377; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evashoes.com.ua",nocase; classtype:attempted-recon; sid:200001378; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"even-ff-gratisterbaru7799.duckdns.org",nocase; classtype:attempted-recon; sid:200001379; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"event-garena-ff196.duckdns.org",nocase; classtype:attempted-recon; sid:200001380; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventt-claim-freefiree.duckdns.org",nocase; classtype:attempted-recon; sid:200001381; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventt-gratis-garena-freefire99.duckdns.org",nocase; classtype:attempted-recon; sid:200001382; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"everestmotors.com.np",nocase; classtype:attempted-recon; sid:200001383; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evo-gamesclub.com",nocase; classtype:attempted-recon; sid:200001384; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evo-monstrcups.com",nocase; classtype:attempted-recon; sid:200001385; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evolbithman.web.app",nocase; classtype:attempted-recon; sid:200001386; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excel-cloud-document-2021.square.site",nocase; classtype:attempted-recon; sid:200001387; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelengbd.com",nocase; classtype:attempted-recon; sid:200001388; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelhana.com",nocase; classtype:attempted-recon; sid:200001389; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodlus.net",nocase; classtype:attempted-recon; sid:200001390; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodus-web2022.com",nocase; classtype:attempted-recon; sid:200001391; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodus.rathodshoes.com",nocase; classtype:attempted-recon; sid:200001392; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodus.taskopus.com",nocase; classtype:attempted-recon; sid:200001393; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduse.art",nocase; classtype:attempted-recon; sid:200001394; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduspool.io",nocase; classtype:attempted-recon; sid:200001395; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exondus-lokin.com",nocase; classtype:attempted-recon; sid:200001396; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exploretrace.xyz",nocase; classtype:attempted-recon; sid:200001397; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extracash-interlbankonline.com",nocase; classtype:attempted-recon; sid:200001398; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extracloud.com.au",nocase; classtype:attempted-recon; sid:200001399; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezblox.site",nocase; classtype:attempted-recon; sid:200001400; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezssausage.com",nocase; classtype:attempted-recon; sid:200001401; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f0soso.go2epal.com",nocase; classtype:attempted-recon; sid:200001402; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f9w1lned0ruqblxi6jahwotak.filesusr.com",nocase; classtype:attempted-recon; sid:200001403; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-accts.pages-recovery.workers.dev",nocase; classtype:attempted-recon; sid:200001404; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-login.tbit.vn",nocase; classtype:attempted-recon; sid:200001405; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook.com-azehhc8kdw.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200001406; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook.com-ikzc4bsnt.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200001407; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook.com-kq1oh2ae.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200001408; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook.com-xd2jlq9rp.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200001409; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook.eventspinff.wtf",nocase; classtype:attempted-recon; sid:200001410; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facenboollogin.blogspot.com",nocase; classtype:attempted-recon; sid:200001411; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facenooflogin.blogspot.com",nocase; classtype:attempted-recon; sid:200001412; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facturationnetflixvhost211246.lowhost.ru",nocase; classtype:attempted-recon; sid:200001413; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facture-proofxmail-orange27.duckdns.org",nocase; classtype:attempted-recon; sid:200001414; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faizankhan0408.github.io",nocase; classtype:attempted-recon; sid:200001415; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancleaners.com",nocase; classtype:attempted-recon; sid:200001416; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy-rain-22bf.vakagew948.workers.dev",nocase; classtype:attempted-recon; sid:200001417; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fantech.co.il",nocase; classtype:attempted-recon; sid:200001418; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fanxtv.info",nocase; classtype:attempted-recon; sid:200001419; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fassilneit.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200001420; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax.gruppobiesse.it",nocase; classtype:attempted-recon; sid:200001421; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fazalahmedstudio.com",nocase; classtype:attempted-recon; sid:200001422; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-case-id-28031803-fcdc-48af.web.app",nocase; classtype:attempted-recon; sid:200001423; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-pages.proteksion-help.workers.dev",nocase; classtype:attempted-recon; sid:200001424; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb.expressturkeyi.com",nocase; classtype:attempted-recon; sid:200001425; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb7927.bget.ru",nocase; classtype:attempted-recon; sid:200001426; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdhgf.xyz",nocase; classtype:attempted-recon; sid:200001427; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"federalaccesscredit.com",nocase; classtype:attempted-recon; sid:200001428; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fedner.net",nocase; classtype:attempted-recon; sid:200001429; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feng234.com",nocase; classtype:attempted-recon; sid:200001430; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fer-brooks.top",nocase; classtype:attempted-recon; sid:200001431; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ferienhof-gempel.de",nocase; classtype:attempted-recon; sid:200001432; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-member-gaarena-vn.tk",nocase; classtype:attempted-recon; sid:200001433; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-member-gacena-vn.tk",nocase; classtype:attempted-recon; sid:200001434; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-member-garena-vn.tokyo",nocase; classtype:attempted-recon; sid:200001435; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-member-garenas-vn.xyz",nocase; classtype:attempted-recon; sid:200001436; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-member-garenas.com",nocase; classtype:attempted-recon; sid:200001437; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-membershipz-garena.ga",nocase; classtype:attempted-recon; sid:200001438; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffmax2322.duckdns.org",nocase; classtype:attempted-recon; sid:200001439; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjr74rhudfguhtfguji.blogspot.com",nocase; classtype:attempted-recon; sid:200001440; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fi.uy",nocase; classtype:attempted-recon; sid:200001441; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fiber10.iaasdns.com",nocase; classtype:attempted-recon; sid:200001442; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fidelitybank-mn.net",nocase; classtype:attempted-recon; sid:200001443; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fighting40s.com",nocase; classtype:attempted-recon; sid:200001444; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fileundelete.net",nocase; classtype:attempted-recon; sid:200001445; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finalfantasyguide.co.uk",nocase; classtype:attempted-recon; sid:200001446; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firstsourcesbus.com",nocase; classtype:attempted-recon; sid:200001447; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fix-wallets.com",nocase; classtype:attempted-recon; sid:200001448; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixi.rest",nocase; classtype:attempted-recon; sid:200001449; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixingtodaymailuserupdates.pages.dev",nocase; classtype:attempted-recon; sid:200001450; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjjfjdf.sitey.me",nocase; classtype:attempted-recon; sid:200001451; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flcancer39-px.rtrk.com",nocase; classtype:attempted-recon; sid:200001452; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floaroma.net",nocase; classtype:attempted-recon; sid:200001453; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fluksrv.mycpanel.rs",nocase; classtype:attempted-recon; sid:200001454; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmwebapp.azurewebsites.net",nocase; classtype:attempted-recon; sid:200001455; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"focused-haslett.198-23-203-218.plesk.page",nocase; classtype:attempted-recon; sid:200001456; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foliar.pl",nocase; classtype:attempted-recon; sid:200001457; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foma-ura-lote.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001458; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foodbysann.com",nocase; classtype:attempted-recon; sid:200001459; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"footprintrental.com",nocase; classtype:attempted-recon; sid:200001460; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foresta-mod.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001461; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formbuddy.com",nocase; classtype:attempted-recon; sid:200001462; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.formium.io",nocase; classtype:attempted-recon; sid:200001463; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fotosuanosite.000webhostapp.com",nocase; classtype:attempted-recon; sid:200001464; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foxly.me",nocase; classtype:attempted-recon; sid:200001465; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fpalpha.myportfolio.com",nocase; classtype:attempted-recon; sid:200001466; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fpmaam.org",nocase; classtype:attempted-recon; sid:200001467; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fpraeromotive.com",nocase; classtype:attempted-recon; sid:200001468; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fr-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200001469; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frankfurtertsparkasse.web.app",nocase; classtype:attempted-recon; sid:200001470; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"franpassion.com",nocase; classtype:attempted-recon; sid:200001471; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-covid-19-stimulus-bonus.nethouse.ru",nocase; classtype:attempted-recon; sid:200001472; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-firecoderedem.blogspot.com",nocase; classtype:attempted-recon; sid:200001473; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeesss.duckdns.org",nocase; classtype:attempted-recon; sid:200001474; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freefire.pontorecargajogo.com",nocase; classtype:attempted-recon; sid:200001475; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeliker.net",nocase; classtype:attempted-recon; sid:200001476; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeroid.com",nocase; classtype:attempted-recon; sid:200001477; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freg-nine.pt",nocase; classtype:attempted-recon; sid:200001478; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"friendsofnechockey.com",nocase; classtype:attempted-recon; sid:200001479; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-ca.com",nocase; classtype:attempted-recon; sid:200001480; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-exchangex.com",nocase; classtype:attempted-recon; sid:200001481; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-me.com",nocase; classtype:attempted-recon; sid:200001482; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register-pro.world",nocase; classtype:attempted-recon; sid:200001483; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register.biz",nocase; classtype:attempted-recon; sid:200001484; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register.website",nocase; classtype:attempted-recon; sid:200001485; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-signup.click",nocase; classtype:attempted-recon; sid:200001486; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx.cool",nocase; classtype:attempted-recon; sid:200001487; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftxbonus.site",nocase; classtype:attempted-recon; sid:200001488; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"funiswap.exchange",nocase; classtype:attempted-recon; sid:200001489; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"furgonetka-1.pl",nocase; classtype:attempted-recon; sid:200001490; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"furgonetka-2.pl",nocase; classtype:attempted-recon; sid:200001491; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fusionrestobar.cl",nocase; classtype:attempted-recon; sid:200001492; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxcmrdv.cn",nocase; classtype:attempted-recon; sid:200001493; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxhalifax.com",nocase; classtype:attempted-recon; sid:200001494; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxxmpavktyihgyqitmuaimubui-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001495; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"g-mtcc.com",nocase; classtype:attempted-recon; sid:200001496; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"g1an8.lrs.plus",nocase; classtype:attempted-recon; sid:200001497; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ga.teesmith.shop",nocase; classtype:attempted-recon; sid:200001498; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gabrielamims.com",nocase; classtype:attempted-recon; sid:200001499; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gabung-grup-bokepvirall2022.duckdns.org",nocase; classtype:attempted-recon; sid:200001500; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gakrvwufrvhxjaabezdbltlhff-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001501; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"garena-xacminhtaikhoan.com",nocase; classtype:attempted-recon; sid:200001502; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gcct.us",nocase; classtype:attempted-recon; sid:200001503; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gct1111.com",nocase; classtype:attempted-recon; sid:200001504; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geg.li",nocase; classtype:attempted-recon; sid:200001505; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gendolew-online.preview-domain.com",nocase; classtype:attempted-recon; sid:200001506; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"generali-italia-ag.hrweb.it",nocase; classtype:attempted-recon; sid:200001507; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"generalwebsecurityupdatewebadmin-daos4.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200001508; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genie-alba.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001509; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gestions-group.xyz",nocase; classtype:attempted-recon; sid:200001510; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get.online-nhs-pass.com",nocase; classtype:attempted-recon; sid:200001511; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getapps.vip",nocase; classtype:attempted-recon; sid:200001512; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getitapprovedacceptourterms2021.pages.dev",nocase; classtype:attempted-recon; sid:200001513; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getlikesfree.com",nocase; classtype:attempted-recon; sid:200001514; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfxx.creatorlink.net",nocase; classtype:attempted-recon; sid:200001515; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghorana.com",nocase; classtype:attempted-recon; sid:200001516; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gifttax.jp",nocase; classtype:attempted-recon; sid:200001517; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"giris-papara.net",nocase; classtype:attempted-recon; sid:200001518; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"girleatsworld.org",nocase; classtype:attempted-recon; sid:200001519; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"girls-tube.mobi",nocase; classtype:attempted-recon; sid:200001520; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"giverewerd.com",nocase; classtype:attempted-recon; sid:200001521; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001522; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glassrze.com",nocase; classtype:attempted-recon; sid:200001523; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globalunitytv.com",nocase; classtype:attempted-recon; sid:200001524; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glogo.org",nocase; classtype:attempted-recon; sid:200001525; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glsword.com",nocase; classtype:attempted-recon; sid:200001526; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmailposteingangi.de",nocase; classtype:attempted-recon; sid:200001527; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmgroupllc.co",nocase; classtype:attempted-recon; sid:200001528; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go24link.com",nocase; classtype:attempted-recon; sid:200001529; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go2epal.com",nocase; classtype:attempted-recon; sid:200001530; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goldenlasgidi10.web.app",nocase; classtype:attempted-recon; sid:200001531; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"golkondaresorts.com",nocase; classtype:attempted-recon; sid:200001532; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"good12345.tripod.com",nocase; classtype:attempted-recon; sid:200001533; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goodtimeforme.net",nocase; classtype:attempted-recon; sid:200001534; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gool-lex.org.ru",nocase; classtype:attempted-recon; sid:200001535; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gosafes.com",nocase; classtype:attempted-recon; sid:200001536; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gov-taxterms.com",nocase; classtype:attempted-recon; sid:200001537; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"govanalyze.page.link",nocase; classtype:attempted-recon; sid:200001538; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gr0upwhatsap-gz9.duckdns.org",nocase; classtype:attempted-recon; sid:200001539; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gramarcales.com.br",nocase; classtype:attempted-recon; sid:200001540; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greekinfra.com",nocase; classtype:attempted-recon; sid:200001541; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grep-idsaveamaoon.info",nocase; classtype:attempted-recon; sid:200001542; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grepidsaveamaoup.com",nocase; classtype:attempted-recon; sid:200001543; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grosshandel-mevida.de",nocase; classtype:attempted-recon; sid:200001544; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"group-whatsapp4.duckdns.org",nocase; classtype:attempted-recon; sid:200001545; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"groworldinternational.com",nocase; classtype:attempted-recon; sid:200001546; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grubwa18-abgindo-viral2022.duckdns.org",nocase; classtype:attempted-recon; sid:200001547; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grup-terbaru-3.duckdns.org",nocase; classtype:attempted-recon; sid:200001548; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupbokep-viral2022.duckdns.org",nocase; classtype:attempted-recon; sid:200001549; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupofsp.com.br",nocase; classtype:attempted-recon; sid:200001550; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupp-bokep-2022.duckdns.org",nocase; classtype:attempted-recon; sid:200001551; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupp-xnxx-terbaruu.duckdns.org",nocase; classtype:attempted-recon; sid:200001552; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupviraljamincrot.duckdns.org",nocase; classtype:attempted-recon; sid:200001553; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupwa578.duckdns.org",nocase; classtype:attempted-recon; sid:200001554; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gscommunityspirit.greenschool.org",nocase; classtype:attempted-recon; sid:200001555; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gstonegmc.com",nocase; classtype:attempted-recon; sid:200001556; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guardianhoundstooth.net",nocase; classtype:attempted-recon; sid:200001557; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gujaratieventsofaustralia.com.au",nocase; classtype:attempted-recon; sid:200001558; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gurukanth.com",nocase; classtype:attempted-recon; sid:200001559; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gwenet.org",nocase; classtype:attempted-recon; sid:200001560; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h0tvjde0vjpno1pro2040.com",nocase; classtype:attempted-recon; sid:200001561; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habbocreditosparati.blogspot.com",nocase; classtype:attempted-recon; sid:200001562; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hahdaeupdate.es.tl",nocase; classtype:attempted-recon; sid:200001563; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hajydggg.weebly.com",nocase; classtype:attempted-recon; sid:200001564; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halaisabudhabi.com",nocase; classtype:attempted-recon; sid:200001565; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halifax-securelink.com",nocase; classtype:attempted-recon; sid:200001566; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handakai.github.io",nocase; classtype:attempted-recon; sid:200001567; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hangovertest1.blogspot.com",nocase; classtype:attempted-recon; sid:200001568; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hans-ledlite.com",nocase; classtype:attempted-recon; sid:200001569; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haroldhazard1-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200001570; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hasseanhannitybeenwaterboarded.com",nocase; classtype:attempted-recon; sid:200001571; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haunlimited.org",nocase; classtype:attempted-recon; sid:200001572; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haxzone.net",nocase; classtype:attempted-recon; sid:200001573; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hcnprdvz.azureedge.net",nocase; classtype:attempted-recon; sid:200001574; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"healthliteracyaustralia.com.au",nocase; classtype:attempted-recon; sid:200001575; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hedefpanel.net",nocase; classtype:attempted-recon; sid:200001576; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heinthu1.github.io",nocase; classtype:attempted-recon; sid:200001577; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helemdurth.ddnsking.com",nocase; classtype:attempted-recon; sid:200001578; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hellenic-postbank.com",nocase; classtype:attempted-recon; sid:200001579; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-recovery-identity-support-international.web.id",nocase; classtype:attempted-recon; sid:200001580; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.insecur.saftyalert.workers.dev",nocase; classtype:attempted-recon; sid:200001581; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.validation-page.workers.dev",nocase; classtype:attempted-recon; sid:200001582; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helppagessupportid1232710650589294.my.id",nocase; classtype:attempted-recon; sid:200001583; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"henan.vxim58i.cn",nocase; classtype:attempted-recon; sid:200001584; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgqxw.ml",nocase; classtype:attempted-recon; sid:200001585; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhdd.mzhemfi.cn",nocase; classtype:attempted-recon; sid:200001586; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hi.switchy.io",nocase; classtype:attempted-recon; sid:200001587; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hidzzs.com",nocase; classtype:attempted-recon; sid:200001588; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly01721.top",nocase; classtype:attempted-recon; sid:200001589; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly06356.top",nocase; classtype:attempted-recon; sid:200001590; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly31916.top",nocase; classtype:attempted-recon; sid:200001591; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly32053.top",nocase; classtype:attempted-recon; sid:200001592; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly38926.top",nocase; classtype:attempted-recon; sid:200001593; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly39091.top",nocase; classtype:attempted-recon; sid:200001594; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly61215.top",nocase; classtype:attempted-recon; sid:200001595; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly71191.top",nocase; classtype:attempted-recon; sid:200001596; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himalayansherpa.com.au",nocase; classtype:attempted-recon; sid:200001597; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himbauane.blogspot.com",nocase; classtype:attempted-recon; sid:200001598; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitman71hd-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200001599; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hkdgroup.com",nocase; classtype:attempted-recon; sid:200001600; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hm.ru",nocase; classtype:attempted-recon; sid:200001601; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hockian.com",nocase; classtype:attempted-recon; sid:200001602; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holks.org",nocase; classtype:attempted-recon; sid:200001603; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-bt.aweiilk.bond",nocase; classtype:attempted-recon; sid:200001604; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home.ei1ns.de",nocase; classtype:attempted-recon; sid:200001605; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home.myfairpoint.net",nocase; classtype:attempted-recon; sid:200001606; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homeluckal.com",nocase; classtype:attempted-recon; sid:200001607; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homesinlogin.com",nocase; classtype:attempted-recon; sid:200001608; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hospitalfarallon.mx",nocase; classtype:attempted-recon; sid:200001609; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hostnix.net",nocase; classtype:attempted-recon; sid:200001610; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotbrooks.com",nocase; classtype:attempted-recon; sid:200001611; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotel-pontos.gr",nocase; classtype:attempted-recon; sid:200001612; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotelsinkaraikal.com",nocase; classtype:attempted-recon; sid:200001613; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotgirlz.mobi",nocase; classtype:attempted-recon; sid:200001614; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hounbvc-c7661.web.app",nocase; classtype:attempted-recon; sid:200001615; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"houseofscotland.com.au",nocase; classtype:attempted-recon; sid:200001616; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpnepgnmwrgdrrsdshzrvyirlx-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001617; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpplotters.in",nocase; classtype:attempted-recon; sid:200001618; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hs-giveaways.ca",nocase; classtype:attempted-recon; sid:200001619; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ht-cargo.com.vn",nocase; classtype:attempted-recon; sid:200001620; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httpeugnerally-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200001621; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httpmarketplace.facebook.com-ifwfkouvn.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200001622; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"https-scert-con04.xyz",nocase; classtype:attempted-recon; sid:200001623; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"https-scert-srv02.xyz",nocase; classtype:attempted-recon; sid:200001624; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"https-scert-srv06.xyz",nocase; classtype:attempted-recon; sid:200001625; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"https-scert-srv08.xyz",nocase; classtype:attempted-recon; sid:200001626; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200001627; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu-hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200001628; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu.sitey.me",nocase; classtype:attempted-recon; sid:200001629; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hutoknepper.de",nocase; classtype:attempted-recon; sid:200001630; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huynguyen2k.github.io",nocase; classtype:attempted-recon; sid:200001631; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hypegames.shop",nocase; classtype:attempted-recon; sid:200001632; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hypesquad-program.com",nocase; classtype:attempted-recon; sid:200001633; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-ask332.dga.jp",nocase; classtype:attempted-recon; sid:200001634; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-glow.org",nocase; classtype:attempted-recon; sid:200001635; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i.violationspage.validationspege.workers.dev",nocase; classtype:attempted-recon; sid:200001636; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ialvkqkadlmcdltczoqpwoociz-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001637; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibf.tw",nocase; classtype:attempted-recon; sid:200001638; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibpm.ru",nocase; classtype:attempted-recon; sid:200001639; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icloud-map-live.com",nocase; classtype:attempted-recon; sid:200001640; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icy.martulangbelulalng.workers.dev",nocase; classtype:attempted-recon; sid:200001641; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-name.sureeitreicetrm.cc",nocase; classtype:attempted-recon; sid:200001642; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"identifiez-vous-avec-votre-compte.yolasite.com",nocase; classtype:attempted-recon; sid:200001643; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"identifiez-vous598.yolasite.com",nocase; classtype:attempted-recon; sid:200001644; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"identify.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200001645; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idhuman-verification.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200001646; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iframejld.avent-media.fr",nocase; classtype:attempted-recon; sid:200001647; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"igsolthermsolar.blogspot.com",nocase; classtype:attempted-recon; sid:200001648; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ii1.su",nocase; classtype:attempted-recon; sid:200001649; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iipvit.by",nocase; classtype:attempted-recon; sid:200001650; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ijjd.h8nmtcc.cn",nocase; classtype:attempted-recon; sid:200001651; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikbmwt.cf",nocase; classtype:attempted-recon; sid:200001652; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikbmwt.tk",nocase; classtype:attempted-recon; sid:200001653; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikdff.jmo904i.cn",nocase; classtype:attempted-recon; sid:200001654; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikjd.uk0xnp8.cn",nocase; classtype:attempted-recon; sid:200001655; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikjgd.rg6bzk7.cn",nocase; classtype:attempted-recon; sid:200001656; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikmcd.u4jdbxm.cn",nocase; classtype:attempted-recon; sid:200001657; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ilooksrare.com",nocase; classtype:attempted-recon; sid:200001658; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imediasolutions.co.in",nocase; classtype:attempted-recon; sid:200001659; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imersao.impulseingles.com.br",nocase; classtype:attempted-recon; sid:200001660; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imf0rm4t10nc3nt3r-1d3nt1tys.000webhostapp.com",nocase; classtype:attempted-recon; sid:200001661; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"img-picture.com",nocase; classtype:attempted-recon; sid:200001662; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imobiliaria-cardinali-com-br.blogspot.com",nocase; classtype:attempted-recon; sid:200001663; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"in.deraya.org",nocase; classtype:attempted-recon; sid:200001664; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inbox-pdf-p7f6ca.web.app",nocase; classtype:attempted-recon; sid:200001665; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indemotorsports.com",nocase; classtype:attempted-recon; sid:200001666; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info.lionnets.com",nocase; classtype:attempted-recon; sid:200001667; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info24-bci.38397398.repl.co",nocase; classtype:attempted-recon; sid:200001668; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infoauth2fa.duckdns.org",nocase; classtype:attempted-recon; sid:200001669; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informations.recovery.confiryourpage.workers.dev",nocase; classtype:attempted-recon; sid:200001670; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infosecplace.com",nocase; classtype:attempted-recon; sid:200001671; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infosprologinmatrisemomols.yolasite.com",nocase; classtype:attempted-recon; sid:200001672; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingaveiculos.creatorlink.net",nocase; classtype:attempted-recon; sid:200001673; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingbankufa.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200001674; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inicia-bancalnterbank.com",nocase; classtype:attempted-recon; sid:200001675; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inked.com.cn",nocase; classtype:attempted-recon; sid:200001676; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"innovasjon.as",nocase; classtype:attempted-recon; sid:200001677; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inps-ep.com",nocase; classtype:attempted-recon; sid:200001678; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagram.rumahteknologi.my.id",nocase; classtype:attempted-recon; sid:200001679; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instantlyconnectmywallet.com",nocase; classtype:attempted-recon; sid:200001680; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instaqramflowresku.000webhostapp.com",nocase; classtype:attempted-recon; sid:200001681; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intellidata-analytica.com",nocase; classtype:attempted-recon; sid:200001682; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intenm.rnynrl.cn",nocase; classtype:attempted-recon; sid:200001683; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-online2.web.app",nocase; classtype:attempted-recon; sid:200001684; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank.pe.lionforce.net",nocase; classtype:attempted-recon; sid:200001685; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbarnk.counselingwithveronica.com",nocase; classtype:attempted-recon; sid:200001686; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbarnk.makeownpharma.com",nocase; classtype:attempted-recon; sid:200001687; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"international-formulier.91-218-65-223.plesk.page",nocase; classtype:attempted-recon; sid:200001688; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internetbankinghelp.com",nocase; classtype:attempted-recon; sid:200001689; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internetservicetech.com",nocase; classtype:attempted-recon; sid:200001690; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intexargentina.com.ar",nocase; classtype:attempted-recon; sid:200001691; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inthewildproductions.com",nocase; classtype:attempted-recon; sid:200001692; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intranet.sztpe.info",nocase; classtype:attempted-recon; sid:200001693; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"investpl.work",nocase; classtype:attempted-recon; sid:200001694; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos-mein.webmail.de.flick-fix.de",nocase; classtype:attempted-recon; sid:200001695; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iplogger.info",nocase; classtype:attempted-recon; sid:200001696; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ironmantech.shop",nocase; classtype:attempted-recon; sid:200001697; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-usagov.com",nocase; classtype:attempted-recon; sid:200001698; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs.gov-taxrefund.com",nocase; classtype:attempted-recon; sid:200001699; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isd2011.com",nocase; classtype:attempted-recon; sid:200001700; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isfirsatibul.com",nocase; classtype:attempted-recon; sid:200001701; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"it-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200001702; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"it-icloud.cn",nocase; classtype:attempted-recon; sid:200001703; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"it.melnikhotels.com",nocase; classtype:attempted-recon; sid:200001704; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itau30horas-itoken.aces-so.com",nocase; classtype:attempted-recon; sid:200001705; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itaucardoficial.com",nocase; classtype:attempted-recon; sid:200001706; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itauempresascl.com",nocase; classtype:attempted-recon; sid:200001707; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itcentralsupport.net",nocase; classtype:attempted-recon; sid:200001708; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"its.tikkycloud.com",nocase; classtype:attempted-recon; sid:200001709; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itsmdshahin.github.io",nocase; classtype:attempted-recon; sid:200001710; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iuhkj.r4f4vmtlso.workers.dev",nocase; classtype:attempted-recon; sid:200001711; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivent2022ff.duckdns.org",nocase; classtype:attempted-recon; sid:200001712; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iventgarena123.duckdns.org",nocase; classtype:attempted-recon; sid:200001713; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iventgratis2022.duckdns.org",nocase; classtype:attempted-recon; sid:200001714; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivon-toeram-panampiana-kaontyfanamarinanasyfiarovanapagas.my.id",nocase; classtype:attempted-recon; sid:200001715; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivu8r0.go2epal.com",nocase; classtype:attempted-recon; sid:200001716; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacco.co.jp-service-tranid-0001-00001m.jtlctj.cn",nocase; classtype:attempted-recon; sid:200001717; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacobliston.com",nocase; classtype:attempted-recon; sid:200001718; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacss.co.jp-service-tramid-0001-00001m.o0bk8j9.cn",nocase; classtype:attempted-recon; sid:200001719; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacss.co.jp-service-tramid-0001-00001m.zl6d6ja.cn",nocase; classtype:attempted-recon; sid:200001720; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jadaart.org",nocase; classtype:attempted-recon; sid:200001721; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jadroogroup.com",nocase; classtype:attempted-recon; sid:200001722; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jam-023d.gitlab.io",nocase; classtype:attempted-recon; sid:200001723; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"james8.aidaform.com",nocase; classtype:attempted-recon; sid:200001724; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-jemput-ade-35.web.id",nocase; classtype:attempted-recon; sid:200001725; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"javarailtours.com",nocase; classtype:attempted-recon; sid:200001726; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"javarockingland.com",nocase; classtype:attempted-recon; sid:200001727; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jax.bz",nocase; classtype:attempted-recon; sid:200001728; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jbconstructiondmv.net",nocase; classtype:attempted-recon; sid:200001729; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jcb.ybenbkx.cn",nocase; classtype:attempted-recon; sid:200001730; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jcb.yuclfkt.cn",nocase; classtype:attempted-recon; sid:200001731; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jetser-electrical-supply.business.site",nocase; classtype:attempted-recon; sid:200001732; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jett.gator.site",nocase; classtype:attempted-recon; sid:200001733; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jffsp7.go2epal.com",nocase; classtype:attempted-recon; sid:200001734; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jflkp.csb.app",nocase; classtype:attempted-recon; sid:200001735; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfovukvysqnglcjghfxncklqih-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001736; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhdd.fjcslad.cn",nocase; classtype:attempted-recon; sid:200001737; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhff.93oe0u9.cn",nocase; classtype:attempted-recon; sid:200001738; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhnsnafzeqitc3f84pfc43a8ad17f.web.app",nocase; classtype:attempted-recon; sid:200001739; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhoffa.com",nocase; classtype:attempted-recon; sid:200001740; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jindai.us",nocase; classtype:attempted-recon; sid:200001741; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jiwanramchemical.com",nocase; classtype:attempted-recon; sid:200001742; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jlogine.com",nocase; classtype:attempted-recon; sid:200001743; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"job-type.com",nocase; classtype:attempted-recon; sid:200001744; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jobs.job.com.bd",nocase; classtype:attempted-recon; sid:200001745; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joecamera.net",nocase; classtype:attempted-recon; sid:200001746; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"john-ashley.de",nocase; classtype:attempted-recon; sid:200001747; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joingrub-niat.duckdns.org",nocase; classtype:attempted-recon; sid:200001748; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jollypapa-76360.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001749; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jollypapa-76360.web.app",nocase; classtype:attempted-recon; sid:200001750; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jow-japan.or.jp",nocase; classtype:attempted-recon; sid:200001751; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joyeriajireh.com.mx",nocase; classtype:attempted-recon; sid:200001752; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.mercari.dontc.xyz",nocase; classtype:attempted-recon; sid:200001753; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.mercari.faceto.xyz",nocase; classtype:attempted-recon; sid:200001754; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.mercari.loginds9wrfds.chargestar.cn",nocase; classtype:attempted-recon; sid:200001755; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.mercari.mnqin.xyz",nocase; classtype:attempted-recon; sid:200001756; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.mercari.righo.top",nocase; classtype:attempted-recon; sid:200001757; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.mercari.singinds8fgd9.gobrain.cn",nocase; classtype:attempted-recon; sid:200001758; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp.rakutens.co",nocase; classtype:attempted-recon; sid:200001759; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jptechdocsign.net",nocase; classtype:attempted-recon; sid:200001760; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jrhayley.plus.com",nocase; classtype:attempted-recon; sid:200001761; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juandfar.github.io",nocase; classtype:attempted-recon; sid:200001762; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juanoso.github.io",nocase; classtype:attempted-recon; sid:200001763; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justgot.gonevis.com",nocase; classtype:attempted-recon; sid:200001764; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justsayingbro.com",nocase; classtype:attempted-recon; sid:200001765; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jyeue43rm95p.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001766; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jz2bab.webwave.dev",nocase; classtype:attempted-recon; sid:200001767; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jzgrf3.go2epal.com",nocase; classtype:attempted-recon; sid:200001768; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k3ja6d.webwave.dev",nocase; classtype:attempted-recon; sid:200001769; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kaamwalibais.co.in",nocase; classtype:attempted-recon; sid:200001770; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kargonova.com",nocase; classtype:attempted-recon; sid:200001771; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kartaltepespor.com",nocase; classtype:attempted-recon; sid:200001772; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kasba.in",nocase; classtype:attempted-recon; sid:200001773; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katanaroninchains.com",nocase; classtype:attempted-recon; sid:200001774; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kbstitchdesigns.com",nocase; classtype:attempted-recon; sid:200001775; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdhdf34j6dfh.dealerwebsite.com",nocase; classtype:attempted-recon; sid:200001776; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdlscaffolding.co.uk",nocase; classtype:attempted-recon; sid:200001777; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kecc.com",nocase; classtype:attempted-recon; sid:200001778; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kecmanijada.com",nocase; classtype:attempted-recon; sid:200001779; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keep-passw0rd-supp0rt20211129-0106.supp0rtaaqkadq2zgnizte3ltbly2etnge5yi05ntm3lty2yjcwyzywzdjhmwa.workers.dev",nocase; classtype:attempted-recon; sid:200001780; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keepactive-8k98-l9k8-98j8-98j78u-d3d3-fr3d34d-2.pages.dev",nocase; classtype:attempted-recon; sid:200001781; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keepboxactive-msoe3e3-osd2rrf432-d342f4-3f34e32edetferef.pages.dev",nocase; classtype:attempted-recon; sid:200001782; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kelseebhankins.com",nocase; classtype:attempted-recon; sid:200001783; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kennehytdjkd.com",nocase; classtype:attempted-recon; sid:200001784; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kevinsmovingservice.com",nocase; classtype:attempted-recon; sid:200001785; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"key-drcp.com",nocase; classtype:attempted-recon; sid:200001786; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghm-invest.web.app",nocase; classtype:attempted-recon; sid:200001787; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khmer.cyou",nocase; classtype:attempted-recon; sid:200001788; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kienthucykhoa.org",nocase; classtype:attempted-recon; sid:200001789; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kissapps.io",nocase; classtype:attempted-recon; sid:200001790; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kivafinance.com",nocase; classtype:attempted-recon; sid:200001791; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjda.td0k2jn.cn",nocase; classtype:attempted-recon; sid:200001792; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhdda.tetfeec.cn",nocase; classtype:attempted-recon; sid:200001793; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjsa.com",nocase; classtype:attempted-recon; sid:200001794; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klaim-ff.duckdns.org",nocase; classtype:attempted-recon; sid:200001795; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klaim-item-mlbb--terbaru2022.duckdns.org",nocase; classtype:attempted-recon; sid:200001796; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klaimff121.duckdns.org",nocase; classtype:attempted-recon; sid:200001797; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klaimff21002.duckdns.org",nocase; classtype:attempted-recon; sid:200001798; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klaimffgay32.duckdns.org",nocase; classtype:attempted-recon; sid:200001799; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klimff102.duckdns.org",nocase; classtype:attempted-recon; sid:200001800; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klockorochsmycken.se",nocase; classtype:attempted-recon; sid:200001801; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmgc.in",nocase; classtype:attempted-recon; sid:200001802; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koerich-c-empresarial.com",nocase; classtype:attempted-recon; sid:200001803; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; classtype:attempted-recon; sid:200001804; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kolito.tk",nocase; classtype:attempted-recon; sid:200001805; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kone-ali123-mon-site-web-cheetah-5.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200001806; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"konfirmasi-identitas-2022.webnode.page",nocase; classtype:attempted-recon; sid:200001807; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"konnect2kamadhenu.com",nocase; classtype:attempted-recon; sid:200001808; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kostwillowglen.com",nocase; classtype:attempted-recon; sid:200001809; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koteng.odoo.com",nocase; classtype:attempted-recon; sid:200001810; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kqgc7.app.link",nocase; classtype:attempted-recon; sid:200001811; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kr-bithumb.web.app",nocase; classtype:attempted-recon; sid:200001812; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kraftongames.gq",nocase; classtype:attempted-recon; sid:200001813; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kralotokiralama.com",nocase; classtype:attempted-recon; sid:200001814; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krill-horse-lb5r.squarespace.com",nocase; classtype:attempted-recon; sid:200001815; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krupije.com",nocase; classtype:attempted-recon; sid:200001816; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krx887.com",nocase; classtype:attempted-recon; sid:200001817; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kspswap.com",nocase; classtype:attempted-recon; sid:200001818; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuchkuchnights.com",nocase; classtype:attempted-recon; sid:200001819; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kucooiin.com",nocase; classtype:attempted-recon; sid:200001820; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kurier24-1.pl",nocase; classtype:attempted-recon; sid:200001821; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kurier24-2.pl",nocase; classtype:attempted-recon; sid:200001822; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kurortnoye.com.ua",nocase; classtype:attempted-recon; sid:200001823; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuucoiin.com",nocase; classtype:attempted-recon; sid:200001824; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kvrgdcwa.ac.in",nocase; classtype:attempted-recon; sid:200001825; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kymberkollection.com",nocase; classtype:attempted-recon; sid:200001826; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"labsicel.bioqmed.ufrj.br",nocase; classtype:attempted-recon; sid:200001827; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lambdaweb.info",nocase; classtype:attempted-recon; sid:200001828; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lapapaoi.com",nocase; classtype:attempted-recon; sid:200001829; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laposada.roncesvalles.es",nocase; classtype:attempted-recon; sid:200001830; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lapotosinaexpress.com",nocase; classtype:attempted-recon; sid:200001831; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"larindbr.creatorlink.net",nocase; classtype:attempted-recon; sid:200001832; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"larvalab.to",nocase; classtype:attempted-recon; sid:200001833; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasyaja.github.io",nocase; classtype:attempted-recon; sid:200001834; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"latinotravel.cz",nocase; classtype:attempted-recon; sid:200001835; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"layanan-verifikasi2022.weeblysite.com",nocase; classtype:attempted-recon; sid:200001836; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ldsplanettt.yolasite.com",nocase; classtype:attempted-recon; sid:200001837; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-diablotin-rouen.com",nocase; classtype:attempted-recon; sid:200001838; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-site-web-de-educanetmessagerie.yolasite.com",nocase; classtype:attempted-recon; sid:200001839; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leadershipmail.org",nocase; classtype:attempted-recon; sid:200001840; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"learningimpactmodel.com",nocase; classtype:attempted-recon; sid:200001841; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leboncoin.paris.my.life.thehoststui.fr",nocase; classtype:attempted-recon; sid:200001842; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leboncoinpaiement.eu",nocase; classtype:attempted-recon; sid:200001843; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"legit-drop.ru",nocase; classtype:attempted-recon; sid:200001844; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"legrandconvoi.com",nocase; classtype:attempted-recon; sid:200001845; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lemeiesta.com",nocase; classtype:attempted-recon; sid:200001846; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lenagruessdich.net",nocase; classtype:attempted-recon; sid:200001847; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lenovo.com.np",nocase; classtype:attempted-recon; sid:200001848; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leroycu.ca",nocase; classtype:attempted-recon; sid:200001849; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"level-650xoom.atwebpages.com",nocase; classtype:attempted-recon; sid:200001850; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lfaosk.go2epal.com",nocase; classtype:attempted-recon; sid:200001851; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lg-onecom-io.web.app",nocase; classtype:attempted-recon; sid:200001852; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lieferung-paket-express-erhalten.ruraldf.com",nocase; classtype:attempted-recon; sid:200001853; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"limitlesstechnology.com.au",nocase; classtype:attempted-recon; sid:200001854; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lineti.com.br",nocase; classtype:attempted-recon; sid:200001855; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liongear.com",nocase; classtype:attempted-recon; sid:200001856; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lirc.cep.edu.vn",nocase; classtype:attempted-recon; sid:200001857; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lisapenawongnails.com",nocase; classtype:attempted-recon; sid:200001858; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-wood-23ca.abssupdatedlogin.workers.dev",nocase; classtype:attempted-recon; sid:200001859; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"litty.shop",nocase; classtype:attempted-recon; sid:200001860; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"litywaootadoe.fun",nocase; classtype:attempted-recon; sid:200001861; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liusanchuan.github.io",nocase; classtype:attempted-recon; sid:200001862; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"live-site.hopto.me",nocase; classtype:attempted-recon; sid:200001863; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"live.rawfednews.com",nocase; classtype:attempted-recon; sid:200001864; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livelifelimitless.com.au",nocase; classtype:attempted-recon; sid:200001865; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ljkds.hvkmjdq.cn",nocase; classtype:attempted-recon; sid:200001866; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lkjds.nlmwjta.cn",nocase; classtype:attempted-recon; sid:200001867; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydbank-accountbreach.com",nocase; classtype:attempted-recon; sid:200001868; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydbank-secure-customers.com",nocase; classtype:attempted-recon; sid:200001869; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydbank-support-team.com",nocase; classtype:attempted-recon; sid:200001870; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydbanking-securelogin.com",nocase; classtype:attempted-recon; sid:200001871; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloyds-login.com",nocase; classtype:attempted-recon; sid:200001872; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydsbank.deregister-payee-secure-auth.com",nocase; classtype:attempted-recon; sid:200001873; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydsbank.secure-online-deregister.com",nocase; classtype:attempted-recon; sid:200001874; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydsbank.secure-personal-device-login.com",nocase; classtype:attempted-recon; sid:200001875; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydsbuk.com",nocase; classtype:attempted-recon; sid:200001876; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloyduk-newdevice-registered-online.com",nocase; classtype:attempted-recon; sid:200001877; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llsckhuhskcamuqwbonsrhwpvk-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001878; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.dev",nocase; classtype:attempted-recon; sid:200001879; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnstagram-help0987.ml",nocase; classtype:attempted-recon; sid:200001880; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"localbitcoins.com.dreamy-sanderson.34-176-203-0.plesk.page",nocase; classtype:attempted-recon; sid:200001881; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"localdepotsupport.com",nocase; classtype:attempted-recon; sid:200001882; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"location-metakyc.buzz",nocase; classtype:attempted-recon; sid:200001883; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lofon-add.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001884; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logcabins.lv",nocase; classtype:attempted-recon; sid:200001885; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-a5x1ir9bkd0dfo9nrbe2akijf3ux35u2gard0djpitipusxxc8.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200001886; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-huaweii.blogspot.co.at",nocase; classtype:attempted-recon; sid:200001887; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-huaweii.blogspot.com",nocase; classtype:attempted-recon; sid:200001888; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-np6hh1hdf6csg7hcskopd44b7e7z4clqa8lput68g5abukevka.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200001889; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-open24.com",nocase; classtype:attempted-recon; sid:200001890; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-postfinance.com",nocase; classtype:attempted-recon; sid:200001891; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.claim-tax-onlinegovernment.com",nocase; classtype:attempted-recon; sid:200001892; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.miercari.com",nocase; classtype:attempted-recon; sid:200001893; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.privategold.uytrtyuhij987.gowithapex.com",nocase; classtype:attempted-recon; sid:200001894; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logverify-df12e-verify-1230-eu.web.app",nocase; classtype:attempted-recon; sid:200001895; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lokalnie.digital",nocase; classtype:attempted-recon; sid:200001896; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lomadesarrollos.mx",nocase; classtype:attempted-recon; sid:200001897; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lombard11.eu",nocase; classtype:attempted-recon; sid:200001898; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"londonpratas.com.br",nocase; classtype:attempted-recon; sid:200001899; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksralre.org",nocase; classtype:attempted-recon; sid:200001900; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrlare.org",nocase; classtype:attempted-recon; sid:200001901; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lot-lp-x.web.app",nocase; classtype:attempted-recon; sid:200001902; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"love.get-happy-to.buzz",nocase; classtype:attempted-recon; sid:200001903; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lp.vp4.me",nocase; classtype:attempted-recon; sid:200001904; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lryt23.com",nocase; classtype:attempted-recon; sid:200001905; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ltdv1signinui.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200001906; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucent-ade.com",nocase; classtype:attempted-recon; sid:200001907; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucid-visvesvaraya-0cb895.netlify.app",nocase; classtype:attempted-recon; sid:200001908; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucy-walker.com",nocase; classtype:attempted-recon; sid:200001909; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lukexteagle.com",nocase; classtype:attempted-recon; sid:200001910; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lunugrcpujwcfnajuctkojawrh-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200001911; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lydab.com",nocase; classtype:attempted-recon; sid:200001912; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.emg6682.com",nocase; classtype:attempted-recon; sid:200001913; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.fancy-bush-cf01.marhabitas.workers.dev",nocase; classtype:attempted-recon; sid:200001914; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.help.insecurpage.workers.dev",nocase; classtype:attempted-recon; sid:200001915; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.protc.safty-pege.workers.dev",nocase; classtype:attempted-recon; sid:200001916; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.recovery.safetyacount.workers.dev",nocase; classtype:attempted-recon; sid:200001917; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.recovery.saftypageupdate.workers.dev",nocase; classtype:attempted-recon; sid:200001918; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.super-recipe-d45d.sombodysad.workers.dev",nocase; classtype:attempted-recon; sid:200001919; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m42club.com",nocase; classtype:attempted-recon; sid:200001920; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"machineryzoneservice.com",nocase; classtype:attempted-recon; sid:200001921; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macjakarta.com",nocase; classtype:attempted-recon; sid:200001922; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madens.com.pl",nocase; classtype:attempted-recon; sid:200001923; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madrhinoconsulting.com",nocase; classtype:attempted-recon; sid:200001924; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maestro.my.prod.dfg152.ru",nocase; classtype:attempted-recon; sid:200001925; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magazr45.fun",nocase; classtype:attempted-recon; sid:200001926; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magistrol.az",nocase; classtype:attempted-recon; sid:200001927; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahaveerpublicschooljodhpur.com",nocase; classtype:attempted-recon; sid:200001928; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahikapur.in",nocase; classtype:attempted-recon; sid:200001929; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahud.globizsapp.com",nocase; classtype:attempted-recon; sid:200001930; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-gmxaktualisierung.yolasite.com",nocase; classtype:attempted-recon; sid:200001931; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-jhdghd-verify-inos.web.app",nocase; classtype:attempted-recon; sid:200001932; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-ovhcloud.web.app",nocase; classtype:attempted-recon; sid:200001933; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-ssocloud-srvr67yhguh.pages.dev",nocase; classtype:attempted-recon; sid:200001934; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.bociltiktokcrot2.duckdns.org",nocase; classtype:attempted-recon; sid:200001935; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.enrollmoreclientsbootcamp.com",nocase; classtype:attempted-recon; sid:200001936; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.expressexports.com.au",nocase; classtype:attempted-recon; sid:200001937; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.i-glow.org",nocase; classtype:attempted-recon; sid:200001938; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.ims-fe.com",nocase; classtype:attempted-recon; sid:200001939; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.kuttabalfatih.com",nocase; classtype:attempted-recon; sid:200001940; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.santepluspharma.com",nocase; classtype:attempted-recon; sid:200001941; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.tante-eunitejoa.duckdns.org",nocase; classtype:attempted-recon; sid:200001942; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.wheel1factory.net",nocase; classtype:attempted-recon; sid:200001943; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.zenstream.com",nocase; classtype:attempted-recon; sid:200001944; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailattuser.weebly.com",nocase; classtype:attempted-recon; sid:200001945; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck1.web.app",nocase; classtype:attempted-recon; sid:200001946; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck11.web.app",nocase; classtype:attempted-recon; sid:200001947; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck12.web.app",nocase; classtype:attempted-recon; sid:200001948; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck13.web.app",nocase; classtype:attempted-recon; sid:200001949; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck15.web.app",nocase; classtype:attempted-recon; sid:200001950; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck16.web.app",nocase; classtype:attempted-recon; sid:200001951; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck17.web.app",nocase; classtype:attempted-recon; sid:200001952; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck19.web.app",nocase; classtype:attempted-recon; sid:200001953; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck2.web.app",nocase; classtype:attempted-recon; sid:200001954; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck20.web.app",nocase; classtype:attempted-recon; sid:200001955; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck5.web.app",nocase; classtype:attempted-recon; sid:200001956; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck6.web.app",nocase; classtype:attempted-recon; sid:200001957; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck7.web.app",nocase; classtype:attempted-recon; sid:200001958; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaiincheck9.web.app",nocase; classtype:attempted-recon; sid:200001959; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001960; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina11.web.app",nocase; classtype:attempted-recon; sid:200001961; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001962; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina2.web.app",nocase; classtype:attempted-recon; sid:200001963; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001964; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina3.web.app",nocase; classtype:attempted-recon; sid:200001965; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001966; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina4.web.app",nocase; classtype:attempted-recon; sid:200001967; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001968; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina5.web.app",nocase; classtype:attempted-recon; sid:200001969; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001970; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina7.web.app",nocase; classtype:attempted-recon; sid:200001971; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001972; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina8.web.app",nocase; classtype:attempted-recon; sid:200001973; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001974; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildomaintina9.web.app",nocase; classtype:attempted-recon; sid:200001975; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001976; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday10.web.app",nocase; classtype:attempted-recon; sid:200001977; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday100.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001978; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday100.web.app",nocase; classtype:attempted-recon; sid:200001979; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday101.web.app",nocase; classtype:attempted-recon; sid:200001980; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday102.web.app",nocase; classtype:attempted-recon; sid:200001981; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday104.web.app",nocase; classtype:attempted-recon; sid:200001982; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday105.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001983; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday105.web.app",nocase; classtype:attempted-recon; sid:200001984; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday106.web.app",nocase; classtype:attempted-recon; sid:200001985; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday107.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001986; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday107.web.app",nocase; classtype:attempted-recon; sid:200001987; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday108.web.app",nocase; classtype:attempted-recon; sid:200001988; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001989; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday110.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001990; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday112.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001991; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday113.web.app",nocase; classtype:attempted-recon; sid:200001992; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday114.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001993; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday115.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001994; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday115.web.app",nocase; classtype:attempted-recon; sid:200001995; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday116.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001996; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday116.web.app",nocase; classtype:attempted-recon; sid:200001997; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday117.web.app",nocase; classtype:attempted-recon; sid:200001998; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday118.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001999; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday119.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002000; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday119.web.app",nocase; classtype:attempted-recon; sid:200002001; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday12.web.app",nocase; classtype:attempted-recon; sid:200002002; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday120.web.app",nocase; classtype:attempted-recon; sid:200002003; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday121.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002004; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday122.web.app",nocase; classtype:attempted-recon; sid:200002005; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday123.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002006; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday123.web.app",nocase; classtype:attempted-recon; sid:200002007; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday124.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002008; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday126.web.app",nocase; classtype:attempted-recon; sid:200002009; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday128.web.app",nocase; classtype:attempted-recon; sid:200002010; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday129.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002011; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday129.web.app",nocase; classtype:attempted-recon; sid:200002012; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002013; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday13.web.app",nocase; classtype:attempted-recon; sid:200002014; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday130.web.app",nocase; classtype:attempted-recon; sid:200002015; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday131.web.app",nocase; classtype:attempted-recon; sid:200002016; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday132.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002017; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday132.web.app",nocase; classtype:attempted-recon; sid:200002018; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday133.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002019; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday134.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002020; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday134.web.app",nocase; classtype:attempted-recon; sid:200002021; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday135.web.app",nocase; classtype:attempted-recon; sid:200002022; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday136.web.app",nocase; classtype:attempted-recon; sid:200002023; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday137.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002024; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday138.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002025; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday139.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002026; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002027; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday140.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002028; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday141.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002029; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday142.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002030; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday142.web.app",nocase; classtype:attempted-recon; sid:200002031; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday143.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002032; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday144.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002033; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday144.web.app",nocase; classtype:attempted-recon; sid:200002034; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday145.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002035; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday146.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002036; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday146.web.app",nocase; classtype:attempted-recon; sid:200002037; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday147.web.app",nocase; classtype:attempted-recon; sid:200002038; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday148.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002039; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday148.web.app",nocase; classtype:attempted-recon; sid:200002040; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday149.web.app",nocase; classtype:attempted-recon; sid:200002041; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday15.web.app",nocase; classtype:attempted-recon; sid:200002042; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday150.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002043; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday150.web.app",nocase; classtype:attempted-recon; sid:200002044; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday151.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002045; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday151.web.app",nocase; classtype:attempted-recon; sid:200002046; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday153.web.app",nocase; classtype:attempted-recon; sid:200002047; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday154.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002048; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday154.web.app",nocase; classtype:attempted-recon; sid:200002049; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday155.web.app",nocase; classtype:attempted-recon; sid:200002050; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday156.web.app",nocase; classtype:attempted-recon; sid:200002051; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday157.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002052; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday157.web.app",nocase; classtype:attempted-recon; sid:200002053; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday158.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002054; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday158.web.app",nocase; classtype:attempted-recon; sid:200002055; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday159.web.app",nocase; classtype:attempted-recon; sid:200002056; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday16.web.app",nocase; classtype:attempted-recon; sid:200002057; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday162.web.app",nocase; classtype:attempted-recon; sid:200002058; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday163.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002059; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday163.web.app",nocase; classtype:attempted-recon; sid:200002060; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday164.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002061; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday165.web.app",nocase; classtype:attempted-recon; sid:200002062; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday166.web.app",nocase; classtype:attempted-recon; sid:200002063; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday167.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002064; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday167.web.app",nocase; classtype:attempted-recon; sid:200002065; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday168.web.app",nocase; classtype:attempted-recon; sid:200002066; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday169.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002067; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002068; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday17.web.app",nocase; classtype:attempted-recon; sid:200002069; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday170.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002070; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday171.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002071; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday171.web.app",nocase; classtype:attempted-recon; sid:200002072; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday172.web.app",nocase; classtype:attempted-recon; sid:200002073; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday173.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002074; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday173.web.app",nocase; classtype:attempted-recon; sid:200002075; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday175.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002076; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday175.web.app",nocase; classtype:attempted-recon; sid:200002077; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday176.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002078; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday176.web.app",nocase; classtype:attempted-recon; sid:200002079; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday178.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002080; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002081; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday180.web.app",nocase; classtype:attempted-recon; sid:200002082; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday181.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002083; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday183.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002084; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday183.web.app",nocase; classtype:attempted-recon; sid:200002085; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday184.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002086; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday184.web.app",nocase; classtype:attempted-recon; sid:200002087; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday185.web.app",nocase; classtype:attempted-recon; sid:200002088; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday186.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002089; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday186.web.app",nocase; classtype:attempted-recon; sid:200002090; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday187.web.app",nocase; classtype:attempted-recon; sid:200002091; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday188.web.app",nocase; classtype:attempted-recon; sid:200002092; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday189.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002093; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002094; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday19.web.app",nocase; classtype:attempted-recon; sid:200002095; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday191.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002096; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday191.web.app",nocase; classtype:attempted-recon; sid:200002097; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday192.web.app",nocase; classtype:attempted-recon; sid:200002098; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday195.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002099; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday196.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002100; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday196.web.app",nocase; classtype:attempted-recon; sid:200002101; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday198.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002102; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday199.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002103; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002104; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002105; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday200.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002106; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday200.web.app",nocase; classtype:attempted-recon; sid:200002107; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday21.web.app",nocase; classtype:attempted-recon; sid:200002108; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002109; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday23.web.app",nocase; classtype:attempted-recon; sid:200002110; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002111; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday24.web.app",nocase; classtype:attempted-recon; sid:200002112; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002113; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday25.web.app",nocase; classtype:attempted-recon; sid:200002114; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002115; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002116; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday28.web.app",nocase; classtype:attempted-recon; sid:200002117; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002118; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday32.web.app",nocase; classtype:attempted-recon; sid:200002119; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002120; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday35.web.app",nocase; classtype:attempted-recon; sid:200002121; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002122; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday37.web.app",nocase; classtype:attempted-recon; sid:200002123; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002124; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday39.web.app",nocase; classtype:attempted-recon; sid:200002125; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002126; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday40.web.app",nocase; classtype:attempted-recon; sid:200002127; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday42.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002128; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday42.web.app",nocase; classtype:attempted-recon; sid:200002129; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002130; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday43.web.app",nocase; classtype:attempted-recon; sid:200002131; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002132; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday44.web.app",nocase; classtype:attempted-recon; sid:200002133; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday45.web.app",nocase; classtype:attempted-recon; sid:200002134; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002135; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday46.web.app",nocase; classtype:attempted-recon; sid:200002136; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002137; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday48.web.app",nocase; classtype:attempted-recon; sid:200002138; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002139; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002140; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday50.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002141; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday51.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002142; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002143; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday52.web.app",nocase; classtype:attempted-recon; sid:200002144; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday53.web.app",nocase; classtype:attempted-recon; sid:200002145; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday54.web.app",nocase; classtype:attempted-recon; sid:200002146; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday55.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002147; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday56.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002148; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday57.web.app",nocase; classtype:attempted-recon; sid:200002149; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday58.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002150; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday58.web.app",nocase; classtype:attempted-recon; sid:200002151; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday6.web.app",nocase; classtype:attempted-recon; sid:200002152; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday60.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002153; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday60.web.app",nocase; classtype:attempted-recon; sid:200002154; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday61.web.app",nocase; classtype:attempted-recon; sid:200002155; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday64.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002156; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday64.web.app",nocase; classtype:attempted-recon; sid:200002157; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday65.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002158; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday66.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002159; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday66.web.app",nocase; classtype:attempted-recon; sid:200002160; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday67.web.app",nocase; classtype:attempted-recon; sid:200002161; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday68.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002162; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday68.web.app",nocase; classtype:attempted-recon; sid:200002163; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday69.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002164; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday69.web.app",nocase; classtype:attempted-recon; sid:200002165; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002166; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday71.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002167; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday71.web.app",nocase; classtype:attempted-recon; sid:200002168; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday73.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002169; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002170; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday75.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002171; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday75.web.app",nocase; classtype:attempted-recon; sid:200002172; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002173; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday78.web.app",nocase; classtype:attempted-recon; sid:200002174; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday79.web.app",nocase; classtype:attempted-recon; sid:200002175; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002176; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday8.web.app",nocase; classtype:attempted-recon; sid:200002177; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday80.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002178; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday80.web.app",nocase; classtype:attempted-recon; sid:200002179; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday81.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002180; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday82.web.app",nocase; classtype:attempted-recon; sid:200002181; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002182; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday85.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002183; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday85.web.app",nocase; classtype:attempted-recon; sid:200002184; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday86.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002185; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002186; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday90.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002187; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday91.web.app",nocase; classtype:attempted-recon; sid:200002188; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday93.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002189; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday95.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002190; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday95.web.app",nocase; classtype:attempted-recon; sid:200002191; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday96.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002192; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday96.web.app",nocase; classtype:attempted-recon; sid:200002193; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday97.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002194; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailerboxfixday98.web.app",nocase; classtype:attempted-recon; sid:200002195; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailgmxaktualiisieren.yolasite.com",nocase; classtype:attempted-recon; sid:200002196; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailingimtcaseupdat4.web.app",nocase; classtype:attempted-recon; sid:200002197; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maillgmxaktualisieren.yolasite.com",nocase; classtype:attempted-recon; sid:200002198; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailplusrolerequestedprivatemailupdates.pages.dev",nocase; classtype:attempted-recon; sid:200002199; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailserver7656566.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200002200; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002201; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror1.web.app",nocase; classtype:attempted-recon; sid:200002202; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror100.web.app",nocase; classtype:attempted-recon; sid:200002203; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002204; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002205; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror12.web.app",nocase; classtype:attempted-recon; sid:200002206; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror14.web.app",nocase; classtype:attempted-recon; sid:200002207; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror15.web.app",nocase; classtype:attempted-recon; sid:200002208; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002209; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002210; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002211; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror19.web.app",nocase; classtype:attempted-recon; sid:200002212; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002213; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror2.web.app",nocase; classtype:attempted-recon; sid:200002214; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002215; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror20.web.app",nocase; classtype:attempted-recon; sid:200002216; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002217; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002218; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror24.web.app",nocase; classtype:attempted-recon; sid:200002219; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002220; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002221; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002222; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002223; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002224; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002225; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002226; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002227; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002228; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror38.web.app",nocase; classtype:attempted-recon; sid:200002229; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002230; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror39.web.app",nocase; classtype:attempted-recon; sid:200002231; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror4.web.app",nocase; classtype:attempted-recon; sid:200002232; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002233; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror40.web.app",nocase; classtype:attempted-recon; sid:200002234; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror41.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002235; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror41.web.app",nocase; classtype:attempted-recon; sid:200002236; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror42.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002237; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002238; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror43.web.app",nocase; classtype:attempted-recon; sid:200002239; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002240; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror44.web.app",nocase; classtype:attempted-recon; sid:200002241; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002242; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror47.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002243; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002244; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror48.web.app",nocase; classtype:attempted-recon; sid:200002245; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002246; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002247; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror5.web.app",nocase; classtype:attempted-recon; sid:200002248; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror50.web.app",nocase; classtype:attempted-recon; sid:200002249; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002250; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror52.web.app",nocase; classtype:attempted-recon; sid:200002251; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror54.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002252; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror55.web.app",nocase; classtype:attempted-recon; sid:200002253; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror56.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002254; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror58.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002255; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror59.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002256; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror61.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002257; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror61.web.app",nocase; classtype:attempted-recon; sid:200002258; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002259; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror65.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002260; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror66.web.app",nocase; classtype:attempted-recon; sid:200002261; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002262; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror68.web.app",nocase; classtype:attempted-recon; sid:200002263; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror69.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002264; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002265; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror70.web.app",nocase; classtype:attempted-recon; sid:200002266; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror71.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002267; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror71.web.app",nocase; classtype:attempted-recon; sid:200002268; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror74.web.app",nocase; classtype:attempted-recon; sid:200002269; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror75.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002270; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002271; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror77.web.app",nocase; classtype:attempted-recon; sid:200002272; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror78.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002273; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror79.web.app",nocase; classtype:attempted-recon; sid:200002274; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror81.web.app",nocase; classtype:attempted-recon; sid:200002275; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror82.web.app",nocase; classtype:attempted-recon; sid:200002276; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002277; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror84.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002278; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror85.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002279; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror85.web.app",nocase; classtype:attempted-recon; sid:200002280; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror86.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002281; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror87.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002282; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror88.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002283; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002284; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002285; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror90.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002286; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror91.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002287; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror91.web.app",nocase; classtype:attempted-recon; sid:200002288; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror92.web.app",nocase; classtype:attempted-recon; sid:200002289; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror93.web.app",nocase; classtype:attempted-recon; sid:200002290; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror94.web.app",nocase; classtype:attempted-recon; sid:200002291; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror98.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002292; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror99.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002293; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailservernotificationerror99.web.app",nocase; classtype:attempted-recon; sid:200002294; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailupdattee16.web.app",nocase; classtype:attempted-recon; sid:200002295; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailupdattee27.web.app",nocase; classtype:attempted-recon; sid:200002296; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailupdattee35.web.app",nocase; classtype:attempted-recon; sid:200002297; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"main-walletconnet.com",nocase; classtype:attempted-recon; sid:200002298; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainmobilerectify.live",nocase; classtype:attempted-recon; sid:200002299; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming121.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002300; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming122.web.app",nocase; classtype:attempted-recon; sid:200002301; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming124.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002302; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming124.web.app",nocase; classtype:attempted-recon; sid:200002303; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming125.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002304; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming125.web.app",nocase; classtype:attempted-recon; sid:200002305; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming126.web.app",nocase; classtype:attempted-recon; sid:200002306; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming128.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002307; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming128.web.app",nocase; classtype:attempted-recon; sid:200002308; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming129.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002309; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming129.web.app",nocase; classtype:attempted-recon; sid:200002310; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming130.web.app",nocase; classtype:attempted-recon; sid:200002311; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming131.web.app",nocase; classtype:attempted-recon; sid:200002312; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming132.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002313; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming132.web.app",nocase; classtype:attempted-recon; sid:200002314; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming135.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002315; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming136.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002316; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming136.web.app",nocase; classtype:attempted-recon; sid:200002317; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming137.web.app",nocase; classtype:attempted-recon; sid:200002318; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming138.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002319; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming138.web.app",nocase; classtype:attempted-recon; sid:200002320; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming139.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002321; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming140.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002322; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming141.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002323; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming141.web.app",nocase; classtype:attempted-recon; sid:200002324; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming142.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002325; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming142.web.app",nocase; classtype:attempted-recon; sid:200002326; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming143.web.app",nocase; classtype:attempted-recon; sid:200002327; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming146.web.app",nocase; classtype:attempted-recon; sid:200002328; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming148.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002329; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming150.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002330; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming151.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002331; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming152.web.app",nocase; classtype:attempted-recon; sid:200002332; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming154.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002333; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming154.web.app",nocase; classtype:attempted-recon; sid:200002334; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming156.web.app",nocase; classtype:attempted-recon; sid:200002335; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming158.web.app",nocase; classtype:attempted-recon; sid:200002336; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming159.web.app",nocase; classtype:attempted-recon; sid:200002337; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming161.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002338; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming163.web.app",nocase; classtype:attempted-recon; sid:200002339; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming164.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002340; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming167.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002341; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming167.web.app",nocase; classtype:attempted-recon; sid:200002342; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming169.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002343; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming170.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002344; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming171.web.app",nocase; classtype:attempted-recon; sid:200002345; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming172.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002346; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming173.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002347; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming174.web.app",nocase; classtype:attempted-recon; sid:200002348; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming175.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002349; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming175.web.app",nocase; classtype:attempted-recon; sid:200002350; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming176.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002351; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming176.web.app",nocase; classtype:attempted-recon; sid:200002352; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming177.web.app",nocase; classtype:attempted-recon; sid:200002353; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming178.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002354; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming179.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002355; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming179.web.app",nocase; classtype:attempted-recon; sid:200002356; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming180.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002357; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming180.web.app",nocase; classtype:attempted-recon; sid:200002358; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming181.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002359; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming181.web.app",nocase; classtype:attempted-recon; sid:200002360; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming182.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002361; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming183.web.app",nocase; classtype:attempted-recon; sid:200002362; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming184.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002363; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming184.web.app",nocase; classtype:attempted-recon; sid:200002364; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming185.web.app",nocase; classtype:attempted-recon; sid:200002365; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming186.web.app",nocase; classtype:attempted-recon; sid:200002366; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming187.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002367; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming187.web.app",nocase; classtype:attempted-recon; sid:200002368; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming188.web.app",nocase; classtype:attempted-recon; sid:200002369; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming189.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002370; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming190.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002371; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming191.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002372; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming191.web.app",nocase; classtype:attempted-recon; sid:200002373; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming192.web.app",nocase; classtype:attempted-recon; sid:200002374; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming193.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002375; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming194.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002376; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming194.web.app",nocase; classtype:attempted-recon; sid:200002377; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming195.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002378; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming195.web.app",nocase; classtype:attempted-recon; sid:200002379; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming196.web.app",nocase; classtype:attempted-recon; sid:200002380; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming198.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002381; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming199.web.app",nocase; classtype:attempted-recon; sid:200002382; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makavemailincoming200.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002383; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maket-cs-go.ru",nocase; classtype:attempted-recon; sid:200002384; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mala-riba.com",nocase; classtype:attempted-recon; sid:200002385; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malaprontaargentina.com.br",nocase; classtype:attempted-recon; sid:200002386; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malehaenterprises.com",nocase; classtype:attempted-recon; sid:200002387; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malukutenggarakab.go.id",nocase; classtype:attempted-recon; sid:200002388; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"manavgatticaretrehberi.com",nocase; classtype:attempted-recon; sid:200002389; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"manodeobramp.com",nocase; classtype:attempted-recon; sid:200002390; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mapsa.com.pe",nocase; classtype:attempted-recon; sid:200002391; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marbautyaa1.co.vu",nocase; classtype:attempted-recon; sid:200002392; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marchrobotics.com",nocase; classtype:attempted-recon; sid:200002393; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"markcestgo.ru",nocase; classtype:attempted-recon; sid:200002394; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"markecsgots.ru",nocase; classtype:attempted-recon; sid:200002395; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketing-106478.square.site",nocase; classtype:attempted-recon; sid:200002396; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace-axieinfinity.io",nocase; classtype:attempted-recon; sid:200002397; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace.facebook.com-ifwfkouvn.isiolo.go.ke",nocase; classtype:attempted-recon; sid:200002398; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplaceaxieinfiniity.com",nocase; classtype:attempted-recon; sid:200002399; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marpujojoli.co.vu",nocase; classtype:attempted-recon; sid:200002400; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marriagerevolution.org",nocase; classtype:attempted-recon; sid:200002401; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masuksiningab.com",nocase; classtype:attempted-recon; sid:200002402; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"match.lookatmynewphotos.com",nocase; classtype:attempted-recon; sid:200002403; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matchoklahoma.com",nocase; classtype:attempted-recon; sid:200002404; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matelamsiska.com",nocase; classtype:attempted-recon; sid:200002405; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"max2shop.com",nocase; classtype:attempted-recon; sid:200002406; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxama.shop",nocase; classtype:attempted-recon; sid:200002407; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxclinic.ru",nocase; classtype:attempted-recon; sid:200002408; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxis-winner-2020.webs.com",nocase; classtype:attempted-recon; sid:200002409; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maya.in.ua",nocase; classtype:attempted-recon; sid:200002410; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbidwt.cf",nocase; classtype:attempted-recon; sid:200002411; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mccarthyelectrical.com",nocase; classtype:attempted-recon; sid:200002412; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcconcep.cluster005.ovh.net",nocase; classtype:attempted-recon; sid:200002413; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mchganistore.solofolio.net",nocase; classtype:attempted-recon; sid:200002414; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mckennittfamily.com",nocase; classtype:attempted-recon; sid:200002415; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdex.li",nocase; classtype:attempted-recon; sid:200002416; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdurucan.com",nocase; classtype:attempted-recon; sid:200002417; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"me.iveva.org",nocase; classtype:attempted-recon; sid:200002418; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mechanicsvilledodge.com",nocase; classtype:attempted-recon; sid:200002419; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medelinahealth.com",nocase; classtype:attempted-recon; sid:200002420; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medeniyetakademisi.org",nocase; classtype:attempted-recon; sid:200002421; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mediabizowners.com",nocase; classtype:attempted-recon; sid:200002422; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mednungtanpoudan-acvwe3.ga",nocase; classtype:attempted-recon; sid:200002423; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medo.world",nocase; classtype:attempted-recon; sid:200002424; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medtamr.com",nocase; classtype:attempted-recon; sid:200002425; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meeting-23900123090123.bitbucket.io",nocase; classtype:attempted-recon; sid:200002426; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meinedkb16012022.page.link",nocase; classtype:attempted-recon; sid:200002427; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mercani.pomyt.info",nocase; classtype:attempted-recon; sid:200002428; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mercantil2326.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200002429; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meremanovegabana.website2.me",nocase; classtype:attempted-recon; sid:200002430; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meriocori-logining.2y3uio.xqq50q.cn",nocase; classtype:attempted-recon; sid:200002431; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"merricori-login.ew32r.6f8u349.cn",nocase; classtype:attempted-recon; sid:200002432; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagerieorangevis-991f8b.ingress-earth.easywp.com",nocase; classtype:attempted-recon; sid:200002433; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messijerkinsukk.dd-dns.de",nocase; classtype:attempted-recon; sid:200002434; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet4.blogspot.com",nocase; classtype:attempted-recon; sid:200002435; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet5.blogspot.com",nocase; classtype:attempted-recon; sid:200002436; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet6.blogspot.com",nocase; classtype:attempted-recon; sid:200002437; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestredaobra.com",nocase; classtype:attempted-recon; sid:200002438; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meta-mask.jana-app.org",nocase; classtype:attempted-recon; sid:200002439; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meta027.cn",nocase; classtype:attempted-recon; sid:200002440; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metahelpsupport.tk",nocase; classtype:attempted-recon; sid:200002441; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metalurgicagiom.com.br",nocase; classtype:attempted-recon; sid:200002442; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaks.xyz",nocase; classtype:attempted-recon; sid:200002443; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-2.jana-app.org",nocase; classtype:attempted-recon; sid:200002444; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-account.xyz",nocase; classtype:attempted-recon; sid:200002445; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-br.jana-app.org",nocase; classtype:attempted-recon; sid:200002446; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-connect.com",nocase; classtype:attempted-recon; sid:200002447; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-connect.org",nocase; classtype:attempted-recon; sid:200002448; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-extension.com.hsurge.com",nocase; classtype:attempted-recon; sid:200002449; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-recover.185-236-231-227.plesk.page",nocase; classtype:attempted-recon; sid:200002450; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallets.yahoosites.com",nocase; classtype:attempted-recon; sid:200002451; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.cam",nocase; classtype:attempted-recon; sid:200002452; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.kiwi",nocase; classtype:attempted-recon; sid:200002453; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.security-information.cc",nocase; classtype:attempted-recon; sid:200002454; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.social",nocase; classtype:attempted-recon; sid:200002455; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.softwarewallet.online",nocase; classtype:attempted-recon; sid:200002456; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.softwarewallet.site",nocase; classtype:attempted-recon; sid:200002457; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.softwarewallets.org",nocase; classtype:attempted-recon; sid:200002458; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.wallets-reauth.net",nocase; classtype:attempted-recon; sid:200002459; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskdownloadandroid.xyz",nocase; classtype:attempted-recon; sid:200002460; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskio.myvnc.com",nocase; classtype:attempted-recon; sid:200002461; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskverification.in",nocase; classtype:attempted-recon; sid:200002462; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamassklogins-us.tumblr.com",nocase; classtype:attempted-recon; sid:200002463; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metannask-verification.com",nocase; classtype:attempted-recon; sid:200002464; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metrics.klicksend.com.br",nocase; classtype:attempted-recon; sid:200002465; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meusabor.com.br",nocase; classtype:attempted-recon; sid:200002466; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.com.cy",nocase; classtype:attempted-recon; sid:200002467; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.lt",nocase; classtype:attempted-recon; sid:200002468; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.rs",nocase; classtype:attempted-recon; sid:200002469; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfoor.com",nocase; classtype:attempted-recon; sid:200002470; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mgfacilityservices.es",nocase; classtype:attempted-recon; sid:200002471; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mi-pago-online12.webnode.es",nocase; classtype:attempted-recon; sid:200002472; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mibancocrece.com.co",nocase; classtype:attempted-recon; sid:200002473; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.login.gacx21v54.nuwdyag.cn",nocase; classtype:attempted-recon; sid:200002474; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.login.gacx21v54.qdvjtqe.cn",nocase; classtype:attempted-recon; sid:200002475; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.login.gacx21v54.uxmtzsl.cn",nocase; classtype:attempted-recon; sid:200002476; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.login.gacx21v54.wzilpxd.cn",nocase; classtype:attempted-recon; sid:200002477; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.login.gacx21v54.xpknzml.cn",nocase; classtype:attempted-recon; sid:200002478; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.logining.ga3yu2i6.chenshisheji.cn",nocase; classtype:attempted-recon; sid:200002479; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.logining.ga3yu2i6.gxjyclub.cn",nocase; classtype:attempted-recon; sid:200002480; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.logining.ga3yu2i6.n1fjqce.cn",nocase; classtype:attempted-recon; sid:200002481; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micard.jp.logining.ga3yu2i6.zhbkgc.cn",nocase; classtype:attempted-recon; sid:200002482; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microcav.square.site",nocase; classtype:attempted-recon; sid:200002483; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftonline.pages.dev",nocase; classtype:attempted-recon; sid:200002484; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftwebserver.mfs.gg",nocase; classtype:attempted-recon; sid:200002485; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micuenta01.github.io",nocase; classtype:attempted-recon; sid:200002486; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midguact5oqemail2240bellt22winniegarvin2228construction2922.weebly.com",nocase; classtype:attempted-recon; sid:200002487; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mil6738366536373.atsnx.com",nocase; classtype:attempted-recon; sid:200002488; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milanobet301.com",nocase; classtype:attempted-recon; sid:200002489; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"militaryvehiclerepair.com",nocase; classtype:attempted-recon; sid:200002490; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"minexexploration.com",nocase; classtype:attempted-recon; sid:200002491; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mingming20160152.github.io",nocase; classtype:attempted-recon; sid:200002492; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mintconnectprotocols.com",nocase; classtype:attempted-recon; sid:200002493; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miozpro.com",nocase; classtype:attempted-recon; sid:200002494; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miracdoviz.com",nocase; classtype:attempted-recon; sid:200002495; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miss-paym02.com",nocase; classtype:attempted-recon; sid:200002496; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"missionshashank.org",nocase; classtype:attempted-recon; sid:200002497; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjayme9jdg9izxixmjeydgg.filesusr.com",nocase; classtype:attempted-recon; sid:200002498; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjayme9jdg9izxiymjnyza.filesusr.com",nocase; classtype:attempted-recon; sid:200002499; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1heta1dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200002500; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetezmtj0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002501; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetgym3jk.filesusr.com",nocase; classtype:attempted-recon; sid:200002502; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetizmtl0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002503; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetqymhro.filesusr.com",nocase; classtype:attempted-recon; sid:200002504; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetu3dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200002505; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetuymhro.filesusr.com",nocase; classtype:attempted-recon; sid:200002506; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu5vdmvtymvymji5dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200002507; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu5vdmvtymvymtexdgg.filesusr.com",nocase; classtype:attempted-recon; sid:200002508; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymuf1z3vzdde4mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002509; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymufwcmlsmde5dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200002510; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhk0mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002511; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhk1mtr0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002512; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhkzmtn0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002513; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bmu0mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002514; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bmuymzfzda.filesusr.com",nocase; classtype:attempted-recon; sid:200002515; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymuphbnvhcnkxmzv0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200002516; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymurly2vtymvymjiyn3ro.filesusr.com",nocase; classtype:attempted-recon; sid:200002517; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymvnlchrlbwjlcjizmxn0.filesusr.com",nocase; classtype:attempted-recon; sid:200002518; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mk2.ge",nocase; classtype:attempted-recon; sid:200002519; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mlbfre.itemdb.com",nocase; classtype:attempted-recon; sid:200002520; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mm7104.github.io",nocase; classtype:attempted-recon; sid:200002521; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmtbb02veriifly.dns05.com",nocase; classtype:attempted-recon; sid:200002522; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mncxx.qbeepor.cn",nocase; classtype:attempted-recon; sid:200002523; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mnnbx.r1rpj09.cn",nocase; classtype:attempted-recon; sid:200002524; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moayadrayyan.com",nocase; classtype:attempted-recon; sid:200002525; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobiile.systemredirect-pages.qf4owyef2n-xoy4w7wpr6pw.p.runcloud.link",nocase; classtype:attempted-recon; sid:200002526; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobile-orange-forever.yolasite.com",nocase; classtype:attempted-recon; sid:200002527; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobile.hedgesportst.me",nocase; classtype:attempted-recon; sid:200002528; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moderator-team.com",nocase; classtype:attempted-recon; sid:200002529; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moderators-team.com",nocase; classtype:attempted-recon; sid:200002530; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mon-token.com",nocase; classtype:attempted-recon; sid:200002531; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monbudri.xyz",nocase; classtype:attempted-recon; sid:200002532; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mondrive.xyz",nocase; classtype:attempted-recon; sid:200002533; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monedri.xyz",nocase; classtype:attempted-recon; sid:200002534; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monirshouvo.github.io",nocase; classtype:attempted-recon; sid:200002535; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monomobileservice.yolasite.com",nocase; classtype:attempted-recon; sid:200002536; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"montenegrolandscape.com",nocase; classtype:attempted-recon; sid:200002537; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"montrealidiomas.com.br",nocase; classtype:attempted-recon; sid:200002538; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monyeward.com",nocase; classtype:attempted-recon; sid:200002539; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"morfybox.com",nocase; classtype:attempted-recon; sid:200002540; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"movil-es.be",nocase; classtype:attempted-recon; sid:200002541; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mrinurse.com",nocase; classtype:attempted-recon; sid:200002542; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mrx77.com",nocase; classtype:attempted-recon; sid:200002543; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msc-doelsach.at",nocase; classtype:attempted-recon; sid:200002544; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msofficemessagescenter-1.mfs.gg",nocase; classtype:attempted-recon; sid:200002545; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtblwhrefer.duckdns.org",nocase; classtype:attempted-recon; sid:200002546; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtngifts2021.blogspot.com",nocase; classtype:attempted-recon; sid:200002547; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtron.in",nocase; classtype:attempted-recon; sid:200002548; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtsn1kotabekasi.sch.id",nocase; classtype:attempted-recon; sid:200002549; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mudraloans.biz",nocase; classtype:attempted-recon; sid:200002550; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxrr.com",nocase; classtype:attempted-recon; sid:200002551; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-bithumb.web.app",nocase; classtype:attempted-recon; sid:200002552; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-business-104870.square.site",nocase; classtype:attempted-recon; sid:200002553; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-business-106990.square.site",nocase; classtype:attempted-recon; sid:200002554; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-contatto-operatore.com",nocase; classtype:attempted-recon; sid:200002555; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-db-client.com",nocase; classtype:attempted-recon; sid:200002556; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-gmail.ir",nocase; classtype:attempted-recon; sid:200002557; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-site219.yolasite.com",nocase; classtype:attempted-recon; sid:200002558; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; classtype:attempted-recon; sid:200002559; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.paydi.login-index-home.x4typfc.cn",nocase; classtype:attempted-recon; sid:200002560; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myfirstallianceltdb.com",nocase; classtype:attempted-recon; sid:200002561; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mygameapp.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002562; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mygoogleaccount.stantrade.xyz",nocase; classtype:attempted-recon; sid:200002563; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myholly5.duckdns.org",nocase; classtype:attempted-recon; sid:200002564; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcb.thxpj.cn",nocase; classtype:attempted-recon; sid:200002565; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mymbg-aa2e2.web.app",nocase; classtype:attempted-recon; sid:200002566; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mymetamask-overviewpage.185-117-91-145.plesk.page",nocase; classtype:attempted-recon; sid:200002567; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mymweb-owner.at.ua",nocase; classtype:attempted-recon; sid:200002568; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myshedbuilder.com",nocase; classtype:attempted-recon; sid:200002569; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mytheamsauthecent.wapgem.com",nocase; classtype:attempted-recon; sid:200002570; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myupdates-mynetflix.com",nocase; classtype:attempted-recon; sid:200002571; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mywalletsvalidation.com",nocase; classtype:attempted-recon; sid:200002572; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mywildwestbbq.com",nocase; classtype:attempted-recon; sid:200002573; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mzdyyds.qmdqdku.cn",nocase; classtype:attempted-recon; sid:200002574; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n-naoko-0319.github.io",nocase; classtype:attempted-recon; sid:200002575; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n0t1f1c4t10n-p4g3r3p0rt.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002576; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n26-service.agency",nocase; classtype:attempted-recon; sid:200002577; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n4t1f1c4t10n-r3p0rtp4g3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002578; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n4t1f1c4t10n-s3cur1tysp4g3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002579; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n5fbs.com",nocase; classtype:attempted-recon; sid:200002580; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n7orton.com",nocase; classtype:attempted-recon; sid:200002581; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"na-coin.com",nocase; classtype:attempted-recon; sid:200002582; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-alert.mobi",nocase; classtype:attempted-recon; sid:200002583; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-www.303.si",nocase; classtype:attempted-recon; sid:200002584; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nabservicemanage.com",nocase; classtype:attempted-recon; sid:200002585; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nabverifyhost.com",nocase; classtype:attempted-recon; sid:200002586; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"najboljeuslugezavas.betterservicesforyou.com",nocase; classtype:attempted-recon; sid:200002587; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nanjing.itud167.cn",nocase; classtype:attempted-recon; sid:200002588; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"napgamelienquan.net",nocase; classtype:attempted-recon; sid:200002589; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nasf8877as8fasmfasfa7fiasf.pages.dev",nocase; classtype:attempted-recon; sid:200002590; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"naturalrocksand.com",nocase; classtype:attempted-recon; sid:200002591; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"natwest.nwolb-login-auth.com",nocase; classtype:attempted-recon; sid:200002592; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"natwest.secure-auth-personal-device.com",nocase; classtype:attempted-recon; sid:200002593; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"natwest.secured-online-verify.com",nocase; classtype:attempted-recon; sid:200002594; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"natwest.secured-personal-verify.com",nocase; classtype:attempted-recon; sid:200002595; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi-cases.com",nocase; classtype:attempted-recon; sid:200002596; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nayameehomes.com",nocase; classtype:attempted-recon; sid:200002597; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nayanielectronics.com",nocase; classtype:attempted-recon; sid:200002598; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nbcc.0bit08a.cn",nocase; classtype:attempted-recon; sid:200002599; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nbcvs.gd65y69.cn",nocase; classtype:attempted-recon; sid:200002600; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ncgroup.club",nocase; classtype:attempted-recon; sid:200002601; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"necessitymag.com",nocase; classtype:attempted-recon; sid:200002602; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nedbankqa.flowblocks.com",nocase; classtype:attempted-recon; sid:200002603; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nedriw.xyz",nocase; classtype:attempted-recon; sid:200002604; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"negociebra.com.br",nocase; classtype:attempted-recon; sid:200002605; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nerestera.onrender.com",nocase; classtype:attempted-recon; sid:200002606; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netciti.id",nocase; classtype:attempted-recon; sid:200002607; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-techarmy.me",nocase; classtype:attempted-recon; sid:200002608; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix.deruwe.me",nocase; classtype:attempted-recon; sid:200002609; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netyho-website.preview-domain.com",nocase; classtype:attempted-recon; sid:200002610; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"neversencommun.fr",nocase; classtype:attempted-recon; sid:200002611; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"new-free-firebgid-2022.duckdns.org",nocase; classtype:attempted-recon; sid:200002612; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newlifenursery.com",nocase; classtype:attempted-recon; sid:200002613; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newrydramafestival.co.uk",nocase; classtype:attempted-recon; sid:200002614; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newsletter.pagueonlinebra.com.br",nocase; classtype:attempted-recon; sid:200002615; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newsodisha.in",nocase; classtype:attempted-recon; sid:200002616; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newsorlen.us",nocase; classtype:attempted-recon; sid:200002617; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newwebsecures-rircv.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200002618; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nextgensoftbd.com",nocase; classtype:attempted-recon; sid:200002619; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nexustocanada.com",nocase; classtype:attempted-recon; sid:200002620; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nftplaystore.net",nocase; classtype:attempted-recon; sid:200002621; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhanquafreefire-mienphi.tk",nocase; classtype:attempted-recon; sid:200002622; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhattinsteel.com",nocase; classtype:attempted-recon; sid:200002623; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhbcd.40ggify.cn",nocase; classtype:attempted-recon; sid:200002624; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhbcd.xitgfmh.cn",nocase; classtype:attempted-recon; sid:200002625; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhbd.yl7g7qz.cn",nocase; classtype:attempted-recon; sid:200002626; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhbdd.ncoavvx.cn",nocase; classtype:attempted-recon; sid:200002627; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhfactor.com",nocase; classtype:attempted-recon; sid:200002628; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhgcs.ugvvluf.cn",nocase; classtype:attempted-recon; sid:200002629; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhhvd.zb06w77.cn",nocase; classtype:attempted-recon; sid:200002630; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhri.net",nocase; classtype:attempted-recon; sid:200002631; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"niagarapower.com",nocase; classtype:attempted-recon; sid:200002632; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"niba.iot-eng.eu",nocase; classtype:attempted-recon; sid:200002633; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nitropromotions.tk",nocase; classtype:attempted-recon; sid:200002634; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nitrosteamf.com",nocase; classtype:attempted-recon; sid:200002635; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nizotchauffage.bilty.be",nocase; classtype:attempted-recon; sid:200002636; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nl-template-hotel-16431266895507.onepage.website",nocase; classtype:attempted-recon; sid:200002637; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nl-template-hotel-16433557012816.onepage.website",nocase; classtype:attempted-recon; sid:200002638; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nl-template-restaura-16424166238436.onepage.website",nocase; classtype:attempted-recon; sid:200002639; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noelink.d2bsmywci2n4ax.amplifyapp.com",nocase; classtype:attempted-recon; sid:200002640; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noemptychairs.ch",nocase; classtype:attempted-recon; sid:200002641; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"normalangstonrealestate.com",nocase; classtype:attempted-recon; sid:200002642; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notife.help.institutepages.workers.dev",nocase; classtype:attempted-recon; sid:200002643; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notification-fb.secure-pages.workers.dev",nocase; classtype:attempted-recon; sid:200002644; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificationmember.mystrikingly.com",nocase; classtype:attempted-recon; sid:200002645; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nour-ala-nour.com",nocase; classtype:attempted-recon; sid:200002646; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"novobracelets.com",nocase; classtype:attempted-recon; sid:200002647; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nrasproperties.com.au",nocase; classtype:attempted-recon; sid:200002648; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nserviceserviceat.mystrikingly.com",nocase; classtype:attempted-recon; sid:200002649; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nslg8.codesandbox.io",nocase; classtype:attempted-recon; sid:200002650; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nueva-acropolis.cl",nocase; classtype:attempted-recon; sid:200002651; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nutrazeus.com",nocase; classtype:attempted-recon; sid:200002652; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nutroquin.com",nocase; classtype:attempted-recon; sid:200002653; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nw-securedfailure.com",nocase; classtype:attempted-recon; sid:200002654; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ny.unblockyoutube.co",nocase; classtype:attempted-recon; sid:200002655; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ny989.com",nocase; classtype:attempted-recon; sid:200002656; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nz6eba6f1q.wixsite.com",nocase; classtype:attempted-recon; sid:200002657; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"o2-failure-billing-update.com",nocase; classtype:attempted-recon; sid:200002658; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"o2-updatebillingvia.com",nocase; classtype:attempted-recon; sid:200002659; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"o2billingauth-update.com",nocase; classtype:attempted-recon; sid:200002660; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oanmce.hjwxkugs.cn",nocase; classtype:attempted-recon; sid:200002661; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oc05h.comalpa.cl",nocase; classtype:attempted-recon; sid:200002662; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oceantires.com",nocase; classtype:attempted-recon; sid:200002663; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ocioturismogalicia.com",nocase; classtype:attempted-recon; sid:200002664; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odiasamaj.net",nocase; classtype:attempted-recon; sid:200002665; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offic365.online",nocase; classtype:attempted-recon; sid:200002666; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offic4046217.sitebuilder.name.tools",nocase; classtype:attempted-recon; sid:200002667; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365loginonlinemicrosoft.weebly.com",nocase; classtype:attempted-recon; sid:200002668; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeee.bubbleapps.io",nocase; classtype:attempted-recon; sid:200002669; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officialevent.way.live",nocase; classtype:attempted-recon; sid:200002670; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officialliker.co",nocase; classtype:attempted-recon; sid:200002671; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officialsolmint.com",nocase; classtype:attempted-recon; sid:200002672; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ogrodywlochy.pl",nocase; classtype:attempted-recon; sid:200002673; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohlinsos.com",nocase; classtype:attempted-recon; sid:200002674; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oiasasca.asiocsacszc.xyz",nocase; classtype:attempted-recon; sid:200002675; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ok202088.com",nocase; classtype:attempted-recon; sid:200002676; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okayama-tyumonjc.com",nocase; classtype:attempted-recon; sid:200002677; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okcs.qj8yua.cn",nocase; classtype:attempted-recon; sid:200002678; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okds.bbtlcve.cn",nocase; classtype:attempted-recon; sid:200002679; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okpwtu.webwave.dev",nocase; classtype:attempted-recon; sid:200002680; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"old.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200002681; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oliveronliner.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002682; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olk.us7apye.cn",nocase; classtype:attempted-recon; sid:200002683; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omesqiwines.de",nocase; classtype:attempted-recon; sid:200002684; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omestredoamassadocg.com.br",nocase; classtype:attempted-recon; sid:200002685; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omnilink.iconosquare.com",nocase; classtype:attempted-recon; sid:200002686; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oncopharma-ae.com",nocase; classtype:attempted-recon; sid:200002687; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"one.devicemng.eu",nocase; classtype:attempted-recon; sid:200002688; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"one.kauf.gr",nocase; classtype:attempted-recon; sid:200002689; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onecreator.info",nocase; classtype:attempted-recon; sid:200002690; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.zhaoge.workers.dev",nocase; classtype:attempted-recon; sid:200002691; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrivebdb.duckdns.org",nocase; classtype:attempted-recon; sid:200002692; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onee-a0488.web.app",nocase; classtype:attempted-recon; sid:200002693; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oneisallandone.web.app",nocase; classtype:attempted-recon; sid:200002694; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oneone-19cd8.web.app",nocase; classtype:attempted-recon; sid:200002695; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oneone-a38ef.web.app",nocase; classtype:attempted-recon; sid:200002696; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-firsthorizon.com",nocase; classtype:attempted-recon; sid:200002697; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.yahoo.reset.solusiinformatika.com",nocase; classtype:attempted-recon; sid:200002698; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online365account.business",nocase; classtype:attempted-recon; sid:200002699; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebanking.security-unauthorise-logon.com",nocase; classtype:attempted-recon; sid:200002700; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebatch.xyz",nocase; classtype:attempted-recon; sid:200002701; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineparibas.us",nocase; classtype:attempted-recon; sid:200002702; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineservicetech.website",nocase; classtype:attempted-recon; sid:200002703; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineverkoperscheck.com",nocase; classtype:attempted-recon; sid:200002704; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlysportplus.com",nocase; classtype:attempted-recon; sid:200002705; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onpennsea.com",nocase; classtype:attempted-recon; sid:200002706; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onpenssea.com",nocase; classtype:attempted-recon; sid:200002707; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ooxvocalor.yolasite.com",nocase; classtype:attempted-recon; sid:200002708; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openseaspp.io",nocase; classtype:attempted-recon; sid:200002709; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optusphone.eu",nocase; classtype:attempted-recon; sid:200002710; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ora-n.yolasite.com",nocase; classtype:attempted-recon; sid:200002711; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orabu.it",nocase; classtype:attempted-recon; sid:200002712; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-dcr.fr",nocase; classtype:attempted-recon; sid:200002713; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-security.cloud.coreoz.com",nocase; classtype:attempted-recon; sid:200002714; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.iobeya.com",nocase; classtype:attempted-recon; sid:200002715; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.sphinxonline.net",nocase; classtype:attempted-recon; sid:200002716; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orangess.contactin.bio",nocase; classtype:attempted-recon; sid:200002717; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"org-nr.yolasite.com",nocase; classtype:attempted-recon; sid:200002718; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orlen-corporation.biz",nocase; classtype:attempted-recon; sid:200002719; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orlen-global.biz",nocase; classtype:attempted-recon; sid:200002720; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orlen-news.biz",nocase; classtype:attempted-recon; sid:200002721; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ormantencs112.odoo.com",nocase; classtype:attempted-recon; sid:200002722; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"osis.world",nocase; classtype:attempted-recon; sid:200002723; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otomoto-h229.net",nocase; classtype:attempted-recon; sid:200002724; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otomoto3452.com",nocase; classtype:attempted-recon; sid:200002725; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oudczfbniitcqdsrmaapdztwqo-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200002726; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ourgarden.us",nocase; classtype:attempted-recon; sid:200002727; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlook1541489.webcindario.com",nocase; classtype:attempted-recon; sid:200002728; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-dfh.web.app",nocase; classtype:attempted-recon; sid:200002729; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oyknrmzazildlsaxutqiatopgs-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200002730; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p1c.servleboncoinser.com",nocase; classtype:attempted-recon; sid:200002731; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.ba",nocase; classtype:attempted-recon; sid:200002732; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.bg",nocase; classtype:attempted-recon; sid:200002733; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.com",nocase; classtype:attempted-recon; sid:200002734; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page-restrict-case22456548.help",nocase; classtype:attempted-recon; sid:200002735; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-1008009999700022199021.com",nocase; classtype:attempted-recon; sid:200002736; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-community-standart-2022.co",nocase; classtype:attempted-recon; sid:200002737; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-marvelous-project.webflow.io",nocase; classtype:attempted-recon; sid:200002738; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-support-office-2021.gq",nocase; classtype:attempted-recon; sid:200002739; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-support-office-2021.tk",nocase; classtype:attempted-recon; sid:200002740; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages.secure-accts.workers.dev",nocase; classtype:attempted-recon; sid:200002741; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paginasmoviles.com.mx",nocase; classtype:attempted-recon; sid:200002742; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagos.sinpemovil.cr",nocase; classtype:attempted-recon; sid:200002743; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paiement-domaineovh.com-ss5sconseil.frss.massagemtantrica.pt",nocase; classtype:attempted-recon; sid:200002744; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paiement-ovhcloud-com-6149aa74.escolatantra.com",nocase; classtype:attempted-recon; sid:200002745; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"palmm.ps",nocase; classtype:attempted-recon; sid:200002746; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancaakesvap.com",nocase; classtype:attempted-recon; sid:200002747; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake-swaptokens.com",nocase; classtype:attempted-recon; sid:200002748; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake7wop.com",nocase; classtype:attempted-recon; sid:200002749; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesvvap-finance.org",nocase; classtype:attempted-recon; sid:200002750; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesvvap.cutandfit.in",nocase; classtype:attempted-recon; sid:200002751; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.finance.tradechange.in",nocase; classtype:attempted-recon; sid:200002752; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.men",nocase; classtype:attempted-recon; sid:200002753; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.salsasourcing.com",nocase; classtype:attempted-recon; sid:200002754; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.updateairdrop29.org",nocase; classtype:attempted-recon; sid:200002755; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapes.company",nocase; classtype:attempted-recon; sid:200002756; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswappshop.blogspot.com",nocase; classtype:attempted-recon; sid:200002757; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakocvop.com",nocase; classtype:attempted-recon; sid:200002758; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancalteswap.finance",nocase; classtype:attempted-recon; sid:200002759; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancekasvop.com",nocase; classtype:attempted-recon; sid:200002760; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panckaceswap.finance",nocase; classtype:attempted-recon; sid:200002761; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pandaskin.ru.com",nocase; classtype:attempted-recon; sid:200002762; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panelweb-4cae2.web.app",nocase; classtype:attempted-recon; sid:200002763; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pantazisezopiiuurmail1.web.app",nocase; classtype:attempted-recon; sid:200002764; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panterpro.com",nocase; classtype:attempted-recon; sid:200002765; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paribass.co",nocase; classtype:attempted-recon; sid:200002766; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pasarbta.info",nocase; classtype:attempted-recon; sid:200002767; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"passionfruit4576261.brizy.site",nocase; classtype:attempted-recon; sid:200002768; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pateltutorials.com",nocase; classtype:attempted-recon; sid:200002769; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"path.faithbible.institute",nocase; classtype:attempted-recon; sid:200002770; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pathospitals.com",nocase; classtype:attempted-recon; sid:200002771; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patient-cell-40f5.updatedlogmylogin.workers.dev",nocase; classtype:attempted-recon; sid:200002772; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patwise.co.in",nocase; classtype:attempted-recon; sid:200002773; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay16-olx.pl",nocase; classtype:attempted-recon; sid:200002774; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payeealert-secure.com",nocase; classtype:attempted-recon; sid:200002775; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paymentnotificationnow.blogspot.com",nocase; classtype:attempted-recon; sid:200002776; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal-gonet-2022.duckdns.org",nocase; classtype:attempted-recon; sid:200002777; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal-online-2deposits-paymentaccept.tk",nocase; classtype:attempted-recon; sid:200002778; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypalforex.co.ke",nocase; classtype:attempted-recon; sid:200002779; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypay.kikorigata.com",nocase; classtype:attempted-recon; sid:200002780; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pbxmainvoicemessage.azurewebsites.net",nocase; classtype:attempted-recon; sid:200002781; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdaconnection.com",nocase; classtype:attempted-recon; sid:200002782; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-cloud-document.weeblysite.com",nocase; classtype:attempted-recon; sid:200002783; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-sharefile-doc.weeblysite.com",nocase; classtype:attempted-recon; sid:200002784; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdflogincnvwo.app.link",nocase; classtype:attempted-recon; sid:200002785; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdfsecured.mystrikingly.com",nocase; classtype:attempted-recon; sid:200002786; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pencakecwap.com",nocase; classtype:attempted-recon; sid:200002787; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectliker.net",nocase; classtype:attempted-recon; sid:200002788; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatan-pemblokiran532.webnode.com",nocase; classtype:attempted-recon; sid:200002789; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatanakunfb2k214.webnode.com",nocase; classtype:attempted-recon; sid:200002790; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatanfb2k21.webnode.com",nocase; classtype:attempted-recon; sid:200002791; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personasperupeonline.xyz",nocase; classtype:attempted-recon; sid:200002792; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-dep.web.app",nocase; classtype:attempted-recon; sid:200002793; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-inwv.web.app",nocase; classtype:attempted-recon; sid:200002794; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-max.web.app",nocase; classtype:attempted-recon; sid:200002795; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge.pl-mk.pl",nocase; classtype:attempted-recon; sid:200002796; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgn-polygon-support.blogspot.com",nocase; classtype:attempted-recon; sid:200002797; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgymov.com",nocase; classtype:attempted-recon; sid:200002798; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantam.app",nocase; classtype:attempted-recon; sid:200002799; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantom-walletweb.app",nocase; classtype:attempted-recon; sid:200002800; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phlexx.com",nocase; classtype:attempted-recon; sid:200002801; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phreshphoto.com",nocase; classtype:attempted-recon; sid:200002802; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pic.ivectorize.com",nocase; classtype:attempted-recon; sid:200002803; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"picnic.industries",nocase; classtype:attempted-recon; sid:200002804; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pics.lookatmynewphotos.com",nocase; classtype:attempted-recon; sid:200002805; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piffvancouver.com",nocase; classtype:attempted-recon; sid:200002806; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pikaresailing.com",nocase; classtype:attempted-recon; sid:200002807; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pikay13.github.io",nocase; classtype:attempted-recon; sid:200002808; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pirana.co.rs",nocase; classtype:attempted-recon; sid:200002809; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pla1060604.nichost.ru",nocase; classtype:attempted-recon; sid:200002810; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plan-o2-monthlypayments.com",nocase; classtype:attempted-recon; sid:200002811; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"planetaamor.org",nocase; classtype:attempted-recon; sid:200002812; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plasticaindia.com",nocase; classtype:attempted-recon; sid:200002813; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"platinumserviceac.com",nocase; classtype:attempted-recon; sid:200002814; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"playgirlgold.com",nocase; classtype:attempted-recon; sid:200002815; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plmn-102523.square.site",nocase; classtype:attempted-recon; sid:200002816; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ploik-102594.weeblysite.com",nocase; classtype:attempted-recon; sid:200002817; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plugmailextraexpiredoldpolicynotificationscenter.pages.dev",nocase; classtype:attempted-recon; sid:200002818; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poc-rewards-program-c2dfc.web.app",nocase; classtype:attempted-recon; sid:200002819; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"podpiska-darom.ru",nocase; classtype:attempted-recon; sid:200002820; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pokajca.web.app",nocase; classtype:attempted-recon; sid:200002821; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poklsa.slodddz.cn",nocase; classtype:attempted-recon; sid:200002822; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polcd.op59bk5.cn",nocase; classtype:attempted-recon; sid:200002823; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polcka-platform.web.app",nocase; classtype:attempted-recon; sid:200002824; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poldf.gejzesp.cn",nocase; classtype:attempted-recon; sid:200002825; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polds.gmj6f2.cn",nocase; classtype:attempted-recon; sid:200002826; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poligrafiapias.com",nocase; classtype:attempted-recon; sid:200002827; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polkadot-france.fr",nocase; classtype:attempted-recon; sid:200002828; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polkametaverse.io",nocase; classtype:attempted-recon; sid:200002829; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polsd.pa0cpof.cn",nocase; classtype:attempted-recon; sid:200002830; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-pro.com",nocase; classtype:attempted-recon; sid:200002831; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-secure.com",nocase; classtype:attempted-recon; sid:200002832; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-wy.store",nocase; classtype:attempted-recon; sid:200002833; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pontservicespk.3utilities.com",nocase; classtype:attempted-recon; sid:200002834; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin.cc",nocase; classtype:attempted-recon; sid:200002835; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"popostdelivrych.com",nocase; classtype:attempted-recon; sid:200002836; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"post-ch-de.34224.info",nocase; classtype:attempted-recon; sid:200002837; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"post-ch-de.65241.org",nocase; classtype:attempted-recon; sid:200002838; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"post-track.ch",nocase; classtype:attempted-recon; sid:200002839; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posta-romana.cameleon-digital.ro",nocase; classtype:attempted-recon; sid:200002840; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posta.comcenter.me",nocase; classtype:attempted-recon; sid:200002841; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postalfees-uk.com",nocase; classtype:attempted-recon; sid:200002842; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postalukservice.com",nocase; classtype:attempted-recon; sid:200002843; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postch9192.cargo.site",nocase; classtype:attempted-recon; sid:200002844; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postglobca.tempurl.host",nocase; classtype:attempted-recon; sid:200002845; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postoffice-hold-parcel.com",nocase; classtype:attempted-recon; sid:200002846; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postoffice-missed-driver.com",nocase; classtype:attempted-recon; sid:200002847; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poww.6hkjmb.cn",nocase; classtype:attempted-recon; sid:200002848; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppnnttcc.ppcnthsc.me",nocase; classtype:attempted-recon; sid:200002849; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pr0t3ct10nc3nt3r-c0mf1rm4t10n.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002850; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"practical-yalow-9870d9.netlify.app",nocase; classtype:attempted-recon; sid:200002851; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preg.dspearhead.com",nocase; classtype:attempted-recon; sid:200002852; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preg.marketingvici.com",nocase; classtype:attempted-recon; sid:200002853; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prepaid-leboncoin.fr",nocase; classtype:attempted-recon; sid:200002854; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preppingconfidence.com",nocase; classtype:attempted-recon; sid:200002855; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prernaindustries.com",nocase; classtype:attempted-recon; sid:200002856; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prestamoextracash.enlinea-pe.live",nocase; classtype:attempted-recon; sid:200002857; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prestamosextracash.extraenlineape.top",nocase; classtype:attempted-recon; sid:200002858; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prikolnaya.com",nocase; classtype:attempted-recon; sid:200002859; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prima-bezpecnost.top",nocase; classtype:attempted-recon; sid:200002860; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"primeaprop.sslblindado.com",nocase; classtype:attempted-recon; sid:200002861; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"primeone.org",nocase; classtype:attempted-recon; sid:200002862; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"printtoner.com.mx",nocase; classtype:attempted-recon; sid:200002863; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privacy-update-page-prtections-association-recovry-secu.web.id",nocase; classtype:attempted-recon; sid:200002864; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privacy-update-secu-recovry-page-protection-4565544.web.id",nocase; classtype:attempted-recon; sid:200002865; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"priyankasandokar1606.github.io",nocase; classtype:attempted-recon; sid:200002866; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pro.icloudremovaltool.com",nocase; classtype:attempted-recon; sid:200002867; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procservautomatizacion.com",nocase; classtype:attempted-recon; sid:200002868; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profilecosmeticsurgery.com",nocase; classtype:attempted-recon; sid:200002869; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"programmnewsrus5.xyz",nocase; classtype:attempted-recon; sid:200002870; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"projectlovewell.com",nocase; classtype:attempted-recon; sid:200002871; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promehedinti.ro",nocase; classtype:attempted-recon; sid:200002872; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promo.mycorporate-rewards.net",nocase; classtype:attempted-recon; sid:200002873; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"propertysoul.com",nocase; classtype:attempted-recon; sid:200002874; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prosmate.com",nocase; classtype:attempted-recon; sid:200002875; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prosxsiuser.myfreesites.net",nocase; classtype:attempted-recon; sid:200002876; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protecpagurszzz.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002877; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protecpagurzzzz.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002878; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protect-4d56vca.surge.sh",nocase; classtype:attempted-recon; sid:200002879; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protectionzupdate2022.web.id",nocase; classtype:attempted-recon; sid:200002880; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prudentialcalifornia.com",nocase; classtype:attempted-recon; sid:200002881; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psalm91-ministries.org",nocase; classtype:attempted-recon; sid:200002882; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-ptan.info",nocase; classtype:attempted-recon; sid:200002883; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pssmedicareworkshop.com",nocase; classtype:attempted-recon; sid:200002884; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pswap.xdapp.xyz",nocase; classtype:attempted-recon; sid:200002885; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptxx.cc",nocase; classtype:attempted-recon; sid:200002886; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgkraftongame.ga",nocase; classtype:attempted-recon; sid:200002887; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgmobilevn.mobi",nocase; classtype:attempted-recon; sid:200002888; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgspecialevent.my.id",nocase; classtype:attempted-recon; sid:200002889; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"publish-p43452-e180057.adobeaemcloud.com",nocase; classtype:attempted-recon; sid:200002890; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puffing.com.pk",nocase; classtype:attempted-recon; sid:200002891; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puresteelmanufacturing.com",nocase; classtype:attempted-recon; sid:200002892; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puroxymembrane.com",nocase; classtype:attempted-recon; sid:200002893; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pvr0k.csb.app",nocase; classtype:attempted-recon; sid:200002894; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pydttuxozmzjmjqxayxfxhycfr-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200002895; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pznytrwx.cf",nocase; classtype:attempted-recon; sid:200002896; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbocd.csb.app",nocase; classtype:attempted-recon; sid:200002897; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qevwisdfztymporlndsckabdil-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200002898; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qf3nt.codesandbox.io",nocase; classtype:attempted-recon; sid:200002899; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qfw.tosex35238.workers.dev",nocase; classtype:attempted-recon; sid:200002900; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qhj39hfxqftr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200002901; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qhmqhgnfqbcoxkwamsioilhdmv-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200002902; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qmqzo.com",nocase; classtype:attempted-recon; sid:200002903; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qsh74pekkv5e8.clickfunnels.com",nocase; classtype:attempted-recon; sid:200002904; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quinaroja.com",nocase; classtype:attempted-recon; sid:200002905; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quotex-qx.com",nocase; classtype:attempted-recon; sid:200002906; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qwas.nfi71vw.cn",nocase; classtype:attempted-recon; sid:200002907; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qweas.p6rhddj.cn",nocase; classtype:attempted-recon; sid:200002908; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qweas.zwfaclq.cn",nocase; classtype:attempted-recon; sid:200002909; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r3c0v3ry-w4rn1ngp4g3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002910; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r3c31v30n3-1d3nt1ty.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002911; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r3c31v30n3-1mpr0v1ngp4p3s.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002912; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r3v3rt10n-c3nt3rp4g3s.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002913; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rabellartz.de",nocase; classtype:attempted-recon; sid:200002914; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rabofree.blogspot.com",nocase; classtype:attempted-recon; sid:200002915; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rabofree.blogspot.li",nocase; classtype:attempted-recon; sid:200002916; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rackenfordlabs.com",nocase; classtype:attempted-recon; sid:200002917; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rackspaceadmincentre6458166884.s3.us-south.cloud-object-storage.appdomain.cloud",nocase; classtype:attempted-recon; sid:200002918; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"racuten.nuef.info",nocase; classtype:attempted-recon; sid:200002919; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radhikamd.github.io",nocase; classtype:attempted-recon; sid:200002920; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raipurrussianescorts.com",nocase; classtype:attempted-recon; sid:200002921; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakoten-card.buogfbizkugf.gq",nocase; classtype:attempted-recon; sid:200002922; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakoten-card.bycsaxwdqunhh.gq",nocase; classtype:attempted-recon; sid:200002923; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakoten-card.motpefhnpvyz.gq",nocase; classtype:attempted-recon; sid:200002924; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakoten.potex.info",nocase; classtype:attempted-recon; sid:200002925; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raoeryl.com",nocase; classtype:attempted-recon; sid:200002926; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ratewatch.net",nocase; classtype:attempted-recon; sid:200002927; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raycargo.com",nocase; classtype:attempted-recon; sid:200002928; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raydiom.io",nocase; classtype:attempted-recon; sid:200002929; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbcmontgomery.com",nocase; classtype:attempted-recon; sid:200002930; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rd7yuik.sfrer.repl.co",nocase; classtype:attempted-recon; sid:200002931; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rdacc.org.au",nocase; classtype:attempted-recon; sid:200002932; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rdirjsjsjjsjsjsla.atwebpages.com",nocase; classtype:attempted-recon; sid:200002933; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re-direct-me.com",nocase; classtype:attempted-recon; sid:200002934; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re-redirection-acc-id923872635122.blogspot.com",nocase; classtype:attempted-recon; sid:200002935; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realestate-page-10843446024.expresspestcontrol.co.nz",nocase; classtype:attempted-recon; sid:200002936; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realindiatravel.com",nocase; classtype:attempted-recon; sid:200002937; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realtorhomeforsalebyrealestateagent.deepbeatzradio.com",nocase; classtype:attempted-recon; sid:200002938; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reauth2fa.duckdns.org",nocase; classtype:attempted-recon; sid:200002939; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reconfirmpost287846656.us",nocase; classtype:attempted-recon; sid:200002940; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reconnectionsync.org",nocase; classtype:attempted-recon; sid:200002941; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recovery-fb.secure-acct.workers.dev",nocase; classtype:attempted-recon; sid:200002942; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redbysfrgroupebox.myfreesites.net",nocase; classtype:attempted-recon; sid:200002943; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redeem-microsoft-code.sitey.me",nocase; classtype:attempted-recon; sid:200002944; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rediractionid547012016089540218057.blogspot.com",nocase; classtype:attempted-recon; sid:200002945; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg-3da7f.web.app",nocase; classtype:attempted-recon; sid:200002946; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg.chaindaohang.com",nocase; classtype:attempted-recon; sid:200002947; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regisdrive.xyz",nocase; classtype:attempted-recon; sid:200002948; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"register-my-device.com",nocase; classtype:attempted-recon; sid:200002949; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"registerdrive.xyz",nocase; classtype:attempted-recon; sid:200002950; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reglic.in",nocase; classtype:attempted-recon; sid:200002951; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regularsweeps.xyz",nocase; classtype:attempted-recon; sid:200002952; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reignbike.com",nocase; classtype:attempted-recon; sid:200002953; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"relevant.systems",nocase; classtype:attempted-recon; sid:200002954; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reliefhairsalon.com.au",nocase; classtype:attempted-recon; sid:200002955; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remaja-simontok.duckdns.org",nocase; classtype:attempted-recon; sid:200002956; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remittance369297292749.goshly.com",nocase; classtype:attempted-recon; sid:200002957; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renew.trusted-travelers-online.com",nocase; classtype:attempted-recon; sid:200002958; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002959; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver13.web.app",nocase; classtype:attempted-recon; sid:200002960; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002961; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver14.web.app",nocase; classtype:attempted-recon; sid:200002962; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002963; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver15.web.app",nocase; classtype:attempted-recon; sid:200002964; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002965; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver18.web.app",nocase; classtype:attempted-recon; sid:200002966; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002967; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver2.web.app",nocase; classtype:attempted-recon; sid:200002968; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002969; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver22.web.app",nocase; classtype:attempted-recon; sid:200002970; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002971; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver7.web.app",nocase; classtype:attempted-recon; sid:200002972; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002973; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renewdomainserver8.web.app",nocase; classtype:attempted-recon; sid:200002974; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renovkonstruksi.com",nocase; classtype:attempted-recon; sid:200002975; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"repl-mess.myfreesites.net",nocase; classtype:attempted-recon; sid:200002976; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reportedpagesissuesactivitiesabuse.co.vu",nocase; classtype:attempted-recon; sid:200002977; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resapremt2022.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002978; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restore.exodusapp.ru",nocase; classtype:attempted-recon; sid:200002979; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retiro.cl",nocase; classtype:attempted-recon; sid:200002980; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retrospectiveplanningenforcementwestsussex.co.uk",nocase; classtype:attempted-recon; sid:200002981; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retrouve-particulier-mailaccord.globaltvnepal.com",nocase; classtype:attempted-recon; sid:200002982; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reupdatedetails-postoffice.com",nocase; classtype:attempted-recon; sid:200002983; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rev.sfr.net.gghost.ru",nocase; classtype:attempted-recon; sid:200002984; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-mynew-device.com",nocase; classtype:attempted-recon; sid:200002985; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reviewbook.org",nocase; classtype:attempted-recon; sid:200002986; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"revistametro.com.ar",nocase; classtype:attempted-recon; sid:200002987; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rezekyanak-anakkutersayang.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002988; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rheasarason.com",nocase; classtype:attempted-recon; sid:200002989; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riaaraworld-jkjyl.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200002990; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riptide-operation.ru.com",nocase; classtype:attempted-recon; sid:200002991; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riptide2022.com",nocase; classtype:attempted-recon; sid:200002992; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risedot.network",nocase; classtype:attempted-recon; sid:200002993; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rivernaoils-wa4qh.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200002994; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riveroflife.org.in",nocase; classtype:attempted-recon; sid:200002995; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rizarichempire.com",nocase; classtype:attempted-recon; sid:200002996; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rizkyinterior.com",nocase; classtype:attempted-recon; sid:200002997; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rlink.vn",nocase; classtype:attempted-recon; sid:200002998; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robertckennedyjr1.com",nocase; classtype:attempted-recon; sid:200002999; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roccobonheur1-my-cheetah-website-copy.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200003000; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rogerword.com",nocase; classtype:attempted-recon; sid:200003001; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roisnoob.github.io",nocase; classtype:attempted-recon; sid:200003002; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rokulinktechnology.com",nocase; classtype:attempted-recon; sid:200003003; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rolinadd.surveysparrow.com",nocase; classtype:attempted-recon; sid:200003004; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rondalowa.blogspot.com",nocase; classtype:attempted-recon; sid:200003005; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ronin-help.com",nocase; classtype:attempted-recon; sid:200003006; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet-connect.com",nocase; classtype:attempted-recon; sid:200003007; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet.cm",nocase; classtype:attempted-recon; sid:200003008; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwalletsupports.com",nocase; classtype:attempted-recon; sid:200003009; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-production-cf.tx1.mailhostbox.com",nocase; classtype:attempted-recon; sid:200003010; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royalwindsorpub.com",nocase; classtype:attempted-recon; sid:200003011; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roygijvhluozwnflsypmewrstt-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200003012; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rplg.co",nocase; classtype:attempted-recon; sid:200003013; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rpysnvtfadbkowicmelhzu.z13.web.core.windows.net",nocase; classtype:attempted-recon; sid:200003014; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rsujkblokqlyqfonpzgztejdji-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200003015; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtrwerw.diskstation.eu",nocase; classtype:attempted-recon; sid:200003016; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"runbrooks.club",nocase; classtype:attempted-recon; sid:200003017; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rust-tve.com",nocase; classtype:attempted-recon; sid:200003018; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rust-twitchs.com",nocase; classtype:attempted-recon; sid:200003019; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruth.martulangbelulalng.workers.dev",nocase; classtype:attempted-recon; sid:200003020; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rx.mloescb.com",nocase; classtype:attempted-recon; sid:200003021; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s-sarfati.co.il",nocase; classtype:attempted-recon; sid:200003022; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.nl-ams.scw.cloud",nocase; classtype:attempted-recon; sid:200003023; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sadervoyages.intnet.mu",nocase; classtype:attempted-recon; sid:200003024; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safetyorlen.biz",nocase; classtype:attempted-recon; sid:200003025; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safetyorlen.us",nocase; classtype:attempted-recon; sid:200003026; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safty.summarycheck.workers.dev",nocase; classtype:attempted-recon; sid:200003027; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saimen.kemnar.xyz",nocase; classtype:attempted-recon; sid:200003028; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saintbarkleyshoes.com",nocase; classtype:attempted-recon; sid:200003029; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saitadobrasil.com.br",nocase; classtype:attempted-recon; sid:200003030; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saldospc.com",nocase; classtype:attempted-recon; sid:200003031; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saliksnas.lojaintegrada.com.br",nocase; classtype:attempted-recon; sid:200003032; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salmanfarsi01.github.io",nocase; classtype:attempted-recon; sid:200003033; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samarahonda.com",nocase; classtype:attempted-recon; sid:200003034; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samvoktor.com",nocase; classtype:attempted-recon; sid:200003035; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanasunty.site",nocase; classtype:attempted-recon; sid:200003036; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandeeppk03.github.io",nocase; classtype:attempted-recon; sid:200003037; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandlanders.com",nocase; classtype:attempted-recon; sid:200003038; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanjilkumar.com",nocase; classtype:attempted-recon; sid:200003039; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sankyo-rz.com",nocase; classtype:attempted-recon; sid:200003040; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanru.cd",nocase; classtype:attempted-recon; sid:200003041; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santader-invest.web.app",nocase; classtype:attempted-recon; sid:200003042; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santepluspharma.eclatmediasolution.website",nocase; classtype:attempted-recon; sid:200003043; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santoshdangi.com.np",nocase; classtype:attempted-recon; sid:200003044; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sarhresources.com",nocase; classtype:attempted-recon; sid:200003045; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saritapariyar.com.np",nocase; classtype:attempted-recon; sid:200003046; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sassy-dolomite-dingo.glitch.me",nocase; classtype:attempted-recon; sid:200003047; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satamilfed.co.za",nocase; classtype:attempted-recon; sid:200003048; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satay-secur.reconfimations.pagedisabled.workers.dev",nocase; classtype:attempted-recon; sid:200003049; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satemi.com.ve",nocase; classtype:attempted-recon; sid:200003050; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satonteams.co.uk",nocase; classtype:attempted-recon; sid:200003051; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saveway-ads.com",nocase; classtype:attempted-recon; sid:200003052; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"savingsfordentalcare.com",nocase; classtype:attempted-recon; sid:200003053; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbs-siebanlagen.de",nocase; classtype:attempted-recon; sid:200003054; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scatresginningcue.com",nocase; classtype:attempted-recon; sid:200003055; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scotiabankhp.repl.co",nocase; classtype:attempted-recon; sid:200003056; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sczn-securewallet.com",nocase; classtype:attempted-recon; sid:200003057; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdgvsdvsdvs.blogspot.com",nocase; classtype:attempted-recon; sid:200003058; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdsrvfkwifffklllllll.godaddysites.com",nocase; classtype:attempted-recon; sid:200003059; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sebat-dhl.blogspot.com",nocase; classtype:attempted-recon; sid:200003060; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sebene27.github.io",nocase; classtype:attempted-recon; sid:200003061; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secondcitysoftware.com",nocase; classtype:attempted-recon; sid:200003062; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sectiondessolutions-9ea166.ingress-daribow.easywp.com",nocase; classtype:attempted-recon; sid:200003063; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-halifax-device.com",nocase; classtype:attempted-recon; sid:200003064; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-mynew-devices.com",nocase; classtype:attempted-recon; sid:200003065; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-runescape.xgm.rnp.mybluehost.me",nocase; classtype:attempted-recon; sid:200003066; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.legalmetric.com",nocase; classtype:attempted-recon; sid:200003067; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.navyfederalcredit.joud.org.sa",nocase; classtype:attempted-recon; sid:200003068; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-or.ru",nocase; classtype:attempted-recon; sid:200003069; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-ak.ru",nocase; classtype:attempted-recon; sid:200003070; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-as.cz",nocase; classtype:attempted-recon; sid:200003071; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-az.ru",nocase; classtype:attempted-recon; sid:200003072; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-cl.ru",nocase; classtype:attempted-recon; sid:200003073; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-co.ru",nocase; classtype:attempted-recon; sid:200003074; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-cu.ru",nocase; classtype:attempted-recon; sid:200003075; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-cv.ru",nocase; classtype:attempted-recon; sid:200003076; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-or.ru",nocase; classtype:attempted-recon; sid:200003077; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-oz.ru",nocase; classtype:attempted-recon; sid:200003078; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-rse.ru",nocase; classtype:attempted-recon; sid:200003079; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-vs.ru",nocase; classtype:attempted-recon; sid:200003080; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure300.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200003081; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure303.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200003082; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure55.webhostinghub.com",nocase; classtype:attempted-recon; sid:200003083; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securegateway-ovhcloud.csl-sl.de",nocase; classtype:attempted-recon; sid:200003084; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securelloyd-help-app.com",nocase; classtype:attempted-recon; sid:200003085; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securenab-log.in",nocase; classtype:attempted-recon; sid:200003086; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-page-community-standards.blogspot.com",nocase; classtype:attempted-recon; sid:200003087; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securpass.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200003088; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selector26.gg",nocase; classtype:attempted-recon; sid:200003089; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selector28.gg",nocase; classtype:attempted-recon; sid:200003090; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seligkounas.gr",nocase; classtype:attempted-recon; sid:200003091; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sen-manole.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003092; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sencreatives.com",nocase; classtype:attempted-recon; sid:200003093; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003094; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox1.web.app",nocase; classtype:attempted-recon; sid:200003095; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003096; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox10.web.app",nocase; classtype:attempted-recon; sid:200003097; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox100.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003098; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox101.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003099; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox101.web.app",nocase; classtype:attempted-recon; sid:200003100; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox102.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003101; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox106.web.app",nocase; classtype:attempted-recon; sid:200003102; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox107.web.app",nocase; classtype:attempted-recon; sid:200003103; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox108.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003104; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox109.web.app",nocase; classtype:attempted-recon; sid:200003105; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003106; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox11.web.app",nocase; classtype:attempted-recon; sid:200003107; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox110.web.app",nocase; classtype:attempted-recon; sid:200003108; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox111.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003109; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox112.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003110; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox112.web.app",nocase; classtype:attempted-recon; sid:200003111; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox114.web.app",nocase; classtype:attempted-recon; sid:200003112; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox115.web.app",nocase; classtype:attempted-recon; sid:200003113; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox116.web.app",nocase; classtype:attempted-recon; sid:200003114; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox117.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003115; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox117.web.app",nocase; classtype:attempted-recon; sid:200003116; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox118.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003117; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox118.web.app",nocase; classtype:attempted-recon; sid:200003118; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox119.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003119; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox119.web.app",nocase; classtype:attempted-recon; sid:200003120; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox12.web.app",nocase; classtype:attempted-recon; sid:200003121; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox120.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003122; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox121.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003123; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox121.web.app",nocase; classtype:attempted-recon; sid:200003124; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox124.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003125; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox125.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003126; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox126.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003127; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox127.web.app",nocase; classtype:attempted-recon; sid:200003128; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox128.web.app",nocase; classtype:attempted-recon; sid:200003129; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox129.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003130; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003131; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox130.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003132; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox131.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003133; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox131.web.app",nocase; classtype:attempted-recon; sid:200003134; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox132.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003135; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox132.web.app",nocase; classtype:attempted-recon; sid:200003136; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox134.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003137; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox135.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003138; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox136.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003139; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox136.web.app",nocase; classtype:attempted-recon; sid:200003140; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox137.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003141; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox138.web.app",nocase; classtype:attempted-recon; sid:200003142; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox139.web.app",nocase; classtype:attempted-recon; sid:200003143; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003144; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox14.web.app",nocase; classtype:attempted-recon; sid:200003145; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox140.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003146; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox140.web.app",nocase; classtype:attempted-recon; sid:200003147; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox143.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003148; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox143.web.app",nocase; classtype:attempted-recon; sid:200003149; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox144.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003150; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox144.web.app",nocase; classtype:attempted-recon; sid:200003151; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox145.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003152; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox145.web.app",nocase; classtype:attempted-recon; sid:200003153; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox146.web.app",nocase; classtype:attempted-recon; sid:200003154; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox147.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003155; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox147.web.app",nocase; classtype:attempted-recon; sid:200003156; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox148.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003157; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox149.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003158; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox149.web.app",nocase; classtype:attempted-recon; sid:200003159; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003160; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox15.web.app",nocase; classtype:attempted-recon; sid:200003161; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox150.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003162; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox150.web.app",nocase; classtype:attempted-recon; sid:200003163; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox151.web.app",nocase; classtype:attempted-recon; sid:200003164; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox152.web.app",nocase; classtype:attempted-recon; sid:200003165; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox154.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003166; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox154.web.app",nocase; classtype:attempted-recon; sid:200003167; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox155.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003168; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox158.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003169; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox159.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003170; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox159.web.app",nocase; classtype:attempted-recon; sid:200003171; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003172; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox16.web.app",nocase; classtype:attempted-recon; sid:200003173; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox161.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003174; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox162.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003175; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox162.web.app",nocase; classtype:attempted-recon; sid:200003176; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox163.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003177; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox163.web.app",nocase; classtype:attempted-recon; sid:200003178; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox166.web.app",nocase; classtype:attempted-recon; sid:200003179; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox168.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003180; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox169.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003181; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003182; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox17.web.app",nocase; classtype:attempted-recon; sid:200003183; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox171.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003184; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox171.web.app",nocase; classtype:attempted-recon; sid:200003185; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox172.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003186; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox172.web.app",nocase; classtype:attempted-recon; sid:200003187; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox173.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003188; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox174.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003189; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox174.web.app",nocase; classtype:attempted-recon; sid:200003190; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox175.web.app",nocase; classtype:attempted-recon; sid:200003191; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox176.web.app",nocase; classtype:attempted-recon; sid:200003192; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox177.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003193; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox177.web.app",nocase; classtype:attempted-recon; sid:200003194; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox178.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003195; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox178.web.app",nocase; classtype:attempted-recon; sid:200003196; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox179.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003197; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox18.web.app",nocase; classtype:attempted-recon; sid:200003198; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox181.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003199; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox181.web.app",nocase; classtype:attempted-recon; sid:200003200; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox182.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003201; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox182.web.app",nocase; classtype:attempted-recon; sid:200003202; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox183.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003203; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox184.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003204; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox184.web.app",nocase; classtype:attempted-recon; sid:200003205; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox186.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003206; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox186.web.app",nocase; classtype:attempted-recon; sid:200003207; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox187.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003208; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox187.web.app",nocase; classtype:attempted-recon; sid:200003209; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox188.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003210; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox188.web.app",nocase; classtype:attempted-recon; sid:200003211; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox189.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003212; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox189.web.app",nocase; classtype:attempted-recon; sid:200003213; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003214; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox19.web.app",nocase; classtype:attempted-recon; sid:200003215; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox190.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003216; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox190.web.app",nocase; classtype:attempted-recon; sid:200003217; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox191.web.app",nocase; classtype:attempted-recon; sid:200003218; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox192.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003219; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox192.web.app",nocase; classtype:attempted-recon; sid:200003220; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox193.web.app",nocase; classtype:attempted-recon; sid:200003221; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox194.web.app",nocase; classtype:attempted-recon; sid:200003222; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox195.web.app",nocase; classtype:attempted-recon; sid:200003223; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox196.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003224; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox196.web.app",nocase; classtype:attempted-recon; sid:200003225; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox197.web.app",nocase; classtype:attempted-recon; sid:200003226; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox198.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003227; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox198.web.app",nocase; classtype:attempted-recon; sid:200003228; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox199.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003229; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox199.web.app",nocase; classtype:attempted-recon; sid:200003230; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003231; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox2.web.app",nocase; classtype:attempted-recon; sid:200003232; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox20.web.app",nocase; classtype:attempted-recon; sid:200003233; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox200.web.app",nocase; classtype:attempted-recon; sid:200003234; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox201.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003235; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox202.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003236; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox203.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003237; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox205.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003238; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox205.web.app",nocase; classtype:attempted-recon; sid:200003239; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox206.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003240; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox208.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003241; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003242; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox21.web.app",nocase; classtype:attempted-recon; sid:200003243; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox210.web.app",nocase; classtype:attempted-recon; sid:200003244; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox211.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003245; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox211.web.app",nocase; classtype:attempted-recon; sid:200003246; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox212.web.app",nocase; classtype:attempted-recon; sid:200003247; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox213.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003248; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox214.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003249; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox215.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003250; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox215.web.app",nocase; classtype:attempted-recon; sid:200003251; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox216.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003252; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox216.web.app",nocase; classtype:attempted-recon; sid:200003253; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox217.web.app",nocase; classtype:attempted-recon; sid:200003254; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox219.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003255; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox219.web.app",nocase; classtype:attempted-recon; sid:200003256; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003257; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox22.web.app",nocase; classtype:attempted-recon; sid:200003258; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox222.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003259; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox223.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003260; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox224.web.app",nocase; classtype:attempted-recon; sid:200003261; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox225.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003262; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox225.web.app",nocase; classtype:attempted-recon; sid:200003263; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox226.web.app",nocase; classtype:attempted-recon; sid:200003264; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox227.web.app",nocase; classtype:attempted-recon; sid:200003265; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox228.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003266; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox228.web.app",nocase; classtype:attempted-recon; sid:200003267; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox229.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003268; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox229.web.app",nocase; classtype:attempted-recon; sid:200003269; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003270; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox230.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003271; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox230.web.app",nocase; classtype:attempted-recon; sid:200003272; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox231.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003273; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox231.web.app",nocase; classtype:attempted-recon; sid:200003274; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox232.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003275; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox233.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003276; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox236.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003277; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox236.web.app",nocase; classtype:attempted-recon; sid:200003278; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox237.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003279; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox238.web.app",nocase; classtype:attempted-recon; sid:200003280; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox239.web.app",nocase; classtype:attempted-recon; sid:200003281; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003282; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox240.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003283; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox241.web.app",nocase; classtype:attempted-recon; sid:200003284; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox242.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003285; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox242.web.app",nocase; classtype:attempted-recon; sid:200003286; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox243.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003287; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox243.web.app",nocase; classtype:attempted-recon; sid:200003288; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox244.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003289; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox244.web.app",nocase; classtype:attempted-recon; sid:200003290; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox245.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003291; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox245.web.app",nocase; classtype:attempted-recon; sid:200003292; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox246.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003293; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox246.web.app",nocase; classtype:attempted-recon; sid:200003294; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox247.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003295; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox247.web.app",nocase; classtype:attempted-recon; sid:200003296; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox248.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003297; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox249.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003298; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003299; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox25.web.app",nocase; classtype:attempted-recon; sid:200003300; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox250.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003301; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox250.web.app",nocase; classtype:attempted-recon; sid:200003302; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox251.web.app",nocase; classtype:attempted-recon; sid:200003303; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox252.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003304; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox252.web.app",nocase; classtype:attempted-recon; sid:200003305; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox253.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003306; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox253.web.app",nocase; classtype:attempted-recon; sid:200003307; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox254.web.app",nocase; classtype:attempted-recon; sid:200003308; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox255.web.app",nocase; classtype:attempted-recon; sid:200003309; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox256.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003310; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox256.web.app",nocase; classtype:attempted-recon; sid:200003311; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox257.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003312; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox257.web.app",nocase; classtype:attempted-recon; sid:200003313; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox258.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003314; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox258.web.app",nocase; classtype:attempted-recon; sid:200003315; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox259.web.app",nocase; classtype:attempted-recon; sid:200003316; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003317; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox26.web.app",nocase; classtype:attempted-recon; sid:200003318; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox260.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003319; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox260.web.app",nocase; classtype:attempted-recon; sid:200003320; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox261.web.app",nocase; classtype:attempted-recon; sid:200003321; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox262.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003322; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox262.web.app",nocase; classtype:attempted-recon; sid:200003323; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox263.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003324; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox264.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003325; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox264.web.app",nocase; classtype:attempted-recon; sid:200003326; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox265.web.app",nocase; classtype:attempted-recon; sid:200003327; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox266.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003328; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox267.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003329; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox268.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003330; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox269.web.app",nocase; classtype:attempted-recon; sid:200003331; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox27.web.app",nocase; classtype:attempted-recon; sid:200003332; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox270.web.app",nocase; classtype:attempted-recon; sid:200003333; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox271.web.app",nocase; classtype:attempted-recon; sid:200003334; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox274.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003335; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox274.web.app",nocase; classtype:attempted-recon; sid:200003336; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox275.web.app",nocase; classtype:attempted-recon; sid:200003337; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox277.web.app",nocase; classtype:attempted-recon; sid:200003338; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox278.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003339; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox278.web.app",nocase; classtype:attempted-recon; sid:200003340; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox279.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003341; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox279.web.app",nocase; classtype:attempted-recon; sid:200003342; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox281.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003343; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox281.web.app",nocase; classtype:attempted-recon; sid:200003344; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox282.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003345; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox285.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003346; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox285.web.app",nocase; classtype:attempted-recon; sid:200003347; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox286.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003348; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox286.web.app",nocase; classtype:attempted-recon; sid:200003349; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox287.web.app",nocase; classtype:attempted-recon; sid:200003350; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox288.web.app",nocase; classtype:attempted-recon; sid:200003351; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox289.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003352; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003353; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox290.web.app",nocase; classtype:attempted-recon; sid:200003354; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox292.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003355; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox292.web.app",nocase; classtype:attempted-recon; sid:200003356; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox293.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003357; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox293.web.app",nocase; classtype:attempted-recon; sid:200003358; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox294.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003359; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox294.web.app",nocase; classtype:attempted-recon; sid:200003360; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox295.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003361; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox297.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003362; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox297.web.app",nocase; classtype:attempted-recon; sid:200003363; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox298.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003364; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox298.web.app",nocase; classtype:attempted-recon; sid:200003365; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003366; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox3.web.app",nocase; classtype:attempted-recon; sid:200003367; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox300.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003368; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox300.web.app",nocase; classtype:attempted-recon; sid:200003369; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox302.web.app",nocase; classtype:attempted-recon; sid:200003370; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox306.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003371; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox307.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003372; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox307.web.app",nocase; classtype:attempted-recon; sid:200003373; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox308.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003374; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox308.web.app",nocase; classtype:attempted-recon; sid:200003375; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox309.web.app",nocase; classtype:attempted-recon; sid:200003376; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003377; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox31.web.app",nocase; classtype:attempted-recon; sid:200003378; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox310.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003379; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox310.web.app",nocase; classtype:attempted-recon; sid:200003380; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox311.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003381; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox311.web.app",nocase; classtype:attempted-recon; sid:200003382; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox312.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003383; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox312.web.app",nocase; classtype:attempted-recon; sid:200003384; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox313.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003385; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox315.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003386; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox317.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003387; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox317.web.app",nocase; classtype:attempted-recon; sid:200003388; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox318.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003389; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox319.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003390; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003391; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox32.web.app",nocase; classtype:attempted-recon; sid:200003392; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox320.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003393; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox321.web.app",nocase; classtype:attempted-recon; sid:200003394; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox323.web.app",nocase; classtype:attempted-recon; sid:200003395; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox324.web.app",nocase; classtype:attempted-recon; sid:200003396; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox326.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003397; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox326.web.app",nocase; classtype:attempted-recon; sid:200003398; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox327.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003399; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox327.web.app",nocase; classtype:attempted-recon; sid:200003400; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003401; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox33.web.app",nocase; classtype:attempted-recon; sid:200003402; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox330.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003403; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox330.web.app",nocase; classtype:attempted-recon; sid:200003404; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox331.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003405; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox331.web.app",nocase; classtype:attempted-recon; sid:200003406; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox332.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003407; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox332.web.app",nocase; classtype:attempted-recon; sid:200003408; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox333.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003409; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox334.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003410; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox335.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003411; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox336.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003412; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox336.web.app",nocase; classtype:attempted-recon; sid:200003413; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox338.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003414; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox338.web.app",nocase; classtype:attempted-recon; sid:200003415; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox339.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003416; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox339.web.app",nocase; classtype:attempted-recon; sid:200003417; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox340.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003418; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox340.web.app",nocase; classtype:attempted-recon; sid:200003419; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox341.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003420; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox342.web.app",nocase; classtype:attempted-recon; sid:200003421; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox343.web.app",nocase; classtype:attempted-recon; sid:200003422; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox345.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003423; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox345.web.app",nocase; classtype:attempted-recon; sid:200003424; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox346.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003425; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox347.web.app",nocase; classtype:attempted-recon; sid:200003426; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox348.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003427; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox348.web.app",nocase; classtype:attempted-recon; sid:200003428; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox349.web.app",nocase; classtype:attempted-recon; sid:200003429; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox35.web.app",nocase; classtype:attempted-recon; sid:200003430; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox350.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003431; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox351.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003432; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox351.web.app",nocase; classtype:attempted-recon; sid:200003433; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox352.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003434; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox353.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003435; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox354.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003436; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox354.web.app",nocase; classtype:attempted-recon; sid:200003437; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox355.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003438; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox356.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003439; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox356.web.app",nocase; classtype:attempted-recon; sid:200003440; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox358.web.app",nocase; classtype:attempted-recon; sid:200003441; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox359.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003442; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox359.web.app",nocase; classtype:attempted-recon; sid:200003443; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox360.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003444; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox361.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003445; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox361.web.app",nocase; classtype:attempted-recon; sid:200003446; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox362.web.app",nocase; classtype:attempted-recon; sid:200003447; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox363.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003448; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox363.web.app",nocase; classtype:attempted-recon; sid:200003449; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox365.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003450; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox365.web.app",nocase; classtype:attempted-recon; sid:200003451; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox367.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003452; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox368.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003453; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox368.web.app",nocase; classtype:attempted-recon; sid:200003454; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox369.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003455; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox369.web.app",nocase; classtype:attempted-recon; sid:200003456; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox371.web.app",nocase; classtype:attempted-recon; sid:200003457; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox372.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003458; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox372.web.app",nocase; classtype:attempted-recon; sid:200003459; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox374.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003460; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox374.web.app",nocase; classtype:attempted-recon; sid:200003461; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox375.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003462; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox375.web.app",nocase; classtype:attempted-recon; sid:200003463; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox377.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003464; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox377.web.app",nocase; classtype:attempted-recon; sid:200003465; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox378.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003466; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox378.web.app",nocase; classtype:attempted-recon; sid:200003467; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox379.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003468; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox380.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003469; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox380.web.app",nocase; classtype:attempted-recon; sid:200003470; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox382.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003471; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox382.web.app",nocase; classtype:attempted-recon; sid:200003472; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox384.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003473; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox385.web.app",nocase; classtype:attempted-recon; sid:200003474; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox386.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003475; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox387.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003476; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox387.web.app",nocase; classtype:attempted-recon; sid:200003477; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox388.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003478; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox389.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003479; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox389.web.app",nocase; classtype:attempted-recon; sid:200003480; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003481; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox39.web.app",nocase; classtype:attempted-recon; sid:200003482; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox390.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003483; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox390.web.app",nocase; classtype:attempted-recon; sid:200003484; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox391.web.app",nocase; classtype:attempted-recon; sid:200003485; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox392.web.app",nocase; classtype:attempted-recon; sid:200003486; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox393.web.app",nocase; classtype:attempted-recon; sid:200003487; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox394.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003488; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox394.web.app",nocase; classtype:attempted-recon; sid:200003489; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox396.web.app",nocase; classtype:attempted-recon; sid:200003490; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox397.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003491; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox397.web.app",nocase; classtype:attempted-recon; sid:200003492; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox398.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003493; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox398.web.app",nocase; classtype:attempted-recon; sid:200003494; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox399.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003495; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003496; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003497; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox400.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003498; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox400.web.app",nocase; classtype:attempted-recon; sid:200003499; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox401.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003500; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox402.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003501; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox402.web.app",nocase; classtype:attempted-recon; sid:200003502; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox403.web.app",nocase; classtype:attempted-recon; sid:200003503; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox404.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003504; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox405.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003505; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox406.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003506; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox406.web.app",nocase; classtype:attempted-recon; sid:200003507; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox407.web.app",nocase; classtype:attempted-recon; sid:200003508; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox408.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003509; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox409.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003510; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox409.web.app",nocase; classtype:attempted-recon; sid:200003511; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox41.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003512; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox41.web.app",nocase; classtype:attempted-recon; sid:200003513; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox410.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003514; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox412.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003515; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox413.web.app",nocase; classtype:attempted-recon; sid:200003516; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox415.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003517; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox415.web.app",nocase; classtype:attempted-recon; sid:200003518; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox417.web.app",nocase; classtype:attempted-recon; sid:200003519; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox418.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003520; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox418.web.app",nocase; classtype:attempted-recon; sid:200003521; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox419.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003522; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox419.web.app",nocase; classtype:attempted-recon; sid:200003523; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox42.web.app",nocase; classtype:attempted-recon; sid:200003524; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox420.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003525; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox421.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003526; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox421.web.app",nocase; classtype:attempted-recon; sid:200003527; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox423.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003528; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox423.web.app",nocase; classtype:attempted-recon; sid:200003529; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox426.web.app",nocase; classtype:attempted-recon; sid:200003530; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox428.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003531; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox429.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003532; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003533; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox430.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003534; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox430.web.app",nocase; classtype:attempted-recon; sid:200003535; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox431.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003536; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox431.web.app",nocase; classtype:attempted-recon; sid:200003537; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox432.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003538; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox432.web.app",nocase; classtype:attempted-recon; sid:200003539; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox433.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003540; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox434.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003541; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox434.web.app",nocase; classtype:attempted-recon; sid:200003542; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox435.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003543; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox435.web.app",nocase; classtype:attempted-recon; sid:200003544; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox437.web.app",nocase; classtype:attempted-recon; sid:200003545; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox438.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003546; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox438.web.app",nocase; classtype:attempted-recon; sid:200003547; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox439.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003548; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003549; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox44.web.app",nocase; classtype:attempted-recon; sid:200003550; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox440.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003551; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox440.web.app",nocase; classtype:attempted-recon; sid:200003552; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox441.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003553; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox441.web.app",nocase; classtype:attempted-recon; sid:200003554; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox442.web.app",nocase; classtype:attempted-recon; sid:200003555; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox443.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003556; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox443.web.app",nocase; classtype:attempted-recon; sid:200003557; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox444.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003558; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox444.web.app",nocase; classtype:attempted-recon; sid:200003559; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox445.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003560; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox445.web.app",nocase; classtype:attempted-recon; sid:200003561; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox446.web.app",nocase; classtype:attempted-recon; sid:200003562; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox447.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003563; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox447.web.app",nocase; classtype:attempted-recon; sid:200003564; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox448.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003565; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox448.web.app",nocase; classtype:attempted-recon; sid:200003566; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox449.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003567; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox449.web.app",nocase; classtype:attempted-recon; sid:200003568; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003569; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox450.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003570; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox451.web.app",nocase; classtype:attempted-recon; sid:200003571; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox452.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003572; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox452.web.app",nocase; classtype:attempted-recon; sid:200003573; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox453.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003574; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox454.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003575; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox454.web.app",nocase; classtype:attempted-recon; sid:200003576; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox455.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003577; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox455.web.app",nocase; classtype:attempted-recon; sid:200003578; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox457.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003579; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox458.web.app",nocase; classtype:attempted-recon; sid:200003580; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox459.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003581; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox459.web.app",nocase; classtype:attempted-recon; sid:200003582; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003583; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox46.web.app",nocase; classtype:attempted-recon; sid:200003584; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox460.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003585; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox460.web.app",nocase; classtype:attempted-recon; sid:200003586; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox461.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003587; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox461.web.app",nocase; classtype:attempted-recon; sid:200003588; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox463.web.app",nocase; classtype:attempted-recon; sid:200003589; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox464.web.app",nocase; classtype:attempted-recon; sid:200003590; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox466.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003591; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox466.web.app",nocase; classtype:attempted-recon; sid:200003592; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox468.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003593; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox468.web.app",nocase; classtype:attempted-recon; sid:200003594; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox469.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003595; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox47.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003596; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox47.web.app",nocase; classtype:attempted-recon; sid:200003597; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox472.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003598; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox472.web.app",nocase; classtype:attempted-recon; sid:200003599; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox473.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003600; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox474.web.app",nocase; classtype:attempted-recon; sid:200003601; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox475.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003602; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox476.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003603; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox476.web.app",nocase; classtype:attempted-recon; sid:200003604; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox477.web.app",nocase; classtype:attempted-recon; sid:200003605; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox478.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003606; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox479.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003607; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox479.web.app",nocase; classtype:attempted-recon; sid:200003608; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003609; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox480.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003610; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox481.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003611; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox481.web.app",nocase; classtype:attempted-recon; sid:200003612; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox482.web.app",nocase; classtype:attempted-recon; sid:200003613; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox483.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003614; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox483.web.app",nocase; classtype:attempted-recon; sid:200003615; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox484.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003616; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox486.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003617; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox486.web.app",nocase; classtype:attempted-recon; sid:200003618; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox487.web.app",nocase; classtype:attempted-recon; sid:200003619; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox488.web.app",nocase; classtype:attempted-recon; sid:200003620; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox489.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003621; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox489.web.app",nocase; classtype:attempted-recon; sid:200003622; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003623; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox490.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003624; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox490.web.app",nocase; classtype:attempted-recon; sid:200003625; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox491.web.app",nocase; classtype:attempted-recon; sid:200003626; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox492.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003627; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox494.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003628; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox494.web.app",nocase; classtype:attempted-recon; sid:200003629; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox495.web.app",nocase; classtype:attempted-recon; sid:200003630; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox496.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003631; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox496.web.app",nocase; classtype:attempted-recon; sid:200003632; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox498.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003633; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox498.web.app",nocase; classtype:attempted-recon; sid:200003634; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox499.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003635; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox50.web.app",nocase; classtype:attempted-recon; sid:200003636; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox500.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003637; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox500.web.app",nocase; classtype:attempted-recon; sid:200003638; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox501.web.app",nocase; classtype:attempted-recon; sid:200003639; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox502.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003640; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox502.web.app",nocase; classtype:attempted-recon; sid:200003641; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox503.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003642; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox504.web.app",nocase; classtype:attempted-recon; sid:200003643; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox505.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003644; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox506.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003645; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox506.web.app",nocase; classtype:attempted-recon; sid:200003646; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox507.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003647; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox507.web.app",nocase; classtype:attempted-recon; sid:200003648; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox509.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003649; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox51.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003650; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox51.web.app",nocase; classtype:attempted-recon; sid:200003651; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox510.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003652; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox511.web.app",nocase; classtype:attempted-recon; sid:200003653; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox513.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003654; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox514.web.app",nocase; classtype:attempted-recon; sid:200003655; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox515.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003656; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox515.web.app",nocase; classtype:attempted-recon; sid:200003657; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox516.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003658; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox516.web.app",nocase; classtype:attempted-recon; sid:200003659; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox517.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003660; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox517.web.app",nocase; classtype:attempted-recon; sid:200003661; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox518.web.app",nocase; classtype:attempted-recon; sid:200003662; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003663; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox52.web.app",nocase; classtype:attempted-recon; sid:200003664; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox521.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003665; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox521.web.app",nocase; classtype:attempted-recon; sid:200003666; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox522.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003667; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox523.web.app",nocase; classtype:attempted-recon; sid:200003668; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox524.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003669; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox525.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003670; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox526.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003671; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox528.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003672; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox528.web.app",nocase; classtype:attempted-recon; sid:200003673; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox529.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003674; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox529.web.app",nocase; classtype:attempted-recon; sid:200003675; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox53.web.app",nocase; classtype:attempted-recon; sid:200003676; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox530.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003677; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox530.web.app",nocase; classtype:attempted-recon; sid:200003678; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox532.web.app",nocase; classtype:attempted-recon; sid:200003679; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox533.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003680; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox533.web.app",nocase; classtype:attempted-recon; sid:200003681; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox534.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003682; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox535.web.app",nocase; classtype:attempted-recon; sid:200003683; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox536.web.app",nocase; classtype:attempted-recon; sid:200003684; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox537.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003685; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox538.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003686; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox538.web.app",nocase; classtype:attempted-recon; sid:200003687; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox539.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003688; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox54.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003689; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox54.web.app",nocase; classtype:attempted-recon; sid:200003690; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox541.web.app",nocase; classtype:attempted-recon; sid:200003691; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox542.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003692; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox542.web.app",nocase; classtype:attempted-recon; sid:200003693; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox544.web.app",nocase; classtype:attempted-recon; sid:200003694; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox545.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003695; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox546.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003696; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox547.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003697; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox547.web.app",nocase; classtype:attempted-recon; sid:200003698; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox549.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003699; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox549.web.app",nocase; classtype:attempted-recon; sid:200003700; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox55.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003701; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox55.web.app",nocase; classtype:attempted-recon; sid:200003702; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox551.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003703; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox551.web.app",nocase; classtype:attempted-recon; sid:200003704; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox553.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003705; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox554.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003706; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox554.web.app",nocase; classtype:attempted-recon; sid:200003707; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox555.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003708; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox557.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003709; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox557.web.app",nocase; classtype:attempted-recon; sid:200003710; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox558.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003711; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox559.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003712; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox559.web.app",nocase; classtype:attempted-recon; sid:200003713; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox56.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003714; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox560.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003715; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox560.web.app",nocase; classtype:attempted-recon; sid:200003716; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox561.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003717; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox562.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003718; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox563.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003719; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox563.web.app",nocase; classtype:attempted-recon; sid:200003720; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox565.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003721; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox565.web.app",nocase; classtype:attempted-recon; sid:200003722; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox566.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003723; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox566.web.app",nocase; classtype:attempted-recon; sid:200003724; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox567.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003725; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox567.web.app",nocase; classtype:attempted-recon; sid:200003726; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox568.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003727; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox568.web.app",nocase; classtype:attempted-recon; sid:200003728; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox570.web.app",nocase; classtype:attempted-recon; sid:200003729; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox571.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003730; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox571.web.app",nocase; classtype:attempted-recon; sid:200003731; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox572.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003732; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox572.web.app",nocase; classtype:attempted-recon; sid:200003733; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox573.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003734; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox575.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003735; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox576.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003736; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox577.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003737; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox579.web.app",nocase; classtype:attempted-recon; sid:200003738; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox581.web.app",nocase; classtype:attempted-recon; sid:200003739; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox582.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003740; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox582.web.app",nocase; classtype:attempted-recon; sid:200003741; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox584.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003742; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox584.web.app",nocase; classtype:attempted-recon; sid:200003743; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox585.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003744; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox586.web.app",nocase; classtype:attempted-recon; sid:200003745; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox587.web.app",nocase; classtype:attempted-recon; sid:200003746; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox588.web.app",nocase; classtype:attempted-recon; sid:200003747; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox59.web.app",nocase; classtype:attempted-recon; sid:200003748; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox590.web.app",nocase; classtype:attempted-recon; sid:200003749; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox591.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003750; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox591.web.app",nocase; classtype:attempted-recon; sid:200003751; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox593.web.app",nocase; classtype:attempted-recon; sid:200003752; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox594.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003753; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox596.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003754; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox596.web.app",nocase; classtype:attempted-recon; sid:200003755; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox597.web.app",nocase; classtype:attempted-recon; sid:200003756; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox598.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003757; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox598.web.app",nocase; classtype:attempted-recon; sid:200003758; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox599.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003759; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003760; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox6.web.app",nocase; classtype:attempted-recon; sid:200003761; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox60.web.app",nocase; classtype:attempted-recon; sid:200003762; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox600.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003763; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox600.web.app",nocase; classtype:attempted-recon; sid:200003764; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox601.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003765; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox601.web.app",nocase; classtype:attempted-recon; sid:200003766; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox603.web.app",nocase; classtype:attempted-recon; sid:200003767; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox604.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003768; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox605.web.app",nocase; classtype:attempted-recon; sid:200003769; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox609.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003770; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox609.web.app",nocase; classtype:attempted-recon; sid:200003771; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox61.web.app",nocase; classtype:attempted-recon; sid:200003772; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox610.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003773; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox611.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003774; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox612.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003775; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox613.web.app",nocase; classtype:attempted-recon; sid:200003776; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox614.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003777; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox614.web.app",nocase; classtype:attempted-recon; sid:200003778; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox615.web.app",nocase; classtype:attempted-recon; sid:200003779; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox616.web.app",nocase; classtype:attempted-recon; sid:200003780; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox617.web.app",nocase; classtype:attempted-recon; sid:200003781; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox619.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003782; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003783; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox620.web.app",nocase; classtype:attempted-recon; sid:200003784; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox63.web.app",nocase; classtype:attempted-recon; sid:200003785; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox64.web.app",nocase; classtype:attempted-recon; sid:200003786; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox65.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003787; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox65.web.app",nocase; classtype:attempted-recon; sid:200003788; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox66.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003789; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox66.web.app",nocase; classtype:attempted-recon; sid:200003790; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003791; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox68.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003792; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox69.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003793; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox69.web.app",nocase; classtype:attempted-recon; sid:200003794; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003795; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox7.web.app",nocase; classtype:attempted-recon; sid:200003796; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox70.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003797; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox70.web.app",nocase; classtype:attempted-recon; sid:200003798; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003799; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox75.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003800; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003801; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox77.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003802; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox77.web.app",nocase; classtype:attempted-recon; sid:200003803; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox78.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003804; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003805; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox80.web.app",nocase; classtype:attempted-recon; sid:200003806; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox81.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003807; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox81.web.app",nocase; classtype:attempted-recon; sid:200003808; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003809; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox84.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003810; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox85.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003811; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox86.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003812; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox86.web.app",nocase; classtype:attempted-recon; sid:200003813; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox87.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003814; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox87.web.app",nocase; classtype:attempted-recon; sid:200003815; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox89.web.app",nocase; classtype:attempted-recon; sid:200003816; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox90.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003817; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox90.web.app",nocase; classtype:attempted-recon; sid:200003818; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox91.web.app",nocase; classtype:attempted-recon; sid:200003819; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox92.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003820; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox93.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003821; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox94.web.app",nocase; classtype:attempted-recon; sid:200003822; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox95.web.app",nocase; classtype:attempted-recon; sid:200003823; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox96.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003824; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox96.web.app",nocase; classtype:attempted-recon; sid:200003825; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox97.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003826; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendermailbox99.web.app",nocase; classtype:attempted-recon; sid:200003827; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sendo-meso.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003828; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serpost-paquetevhost211347.lowhost.ru",nocase; classtype:attempted-recon; sid:200003829; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sertyxese.myfreesites.net",nocase; classtype:attempted-recon; sid:200003830; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server-networksolutions.web.app",nocase; classtype:attempted-recon; sid:200003831; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server372121.nazwa.pl",nocase; classtype:attempted-recon; sid:200003832; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-lkdn2020.gacconstrutora.com.br",nocase; classtype:attempted-recon; sid:200003833; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service.amaznzon.com",nocase; classtype:attempted-recon; sid:200003834; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicepage.service-page.workers.dev",nocase; classtype:attempted-recon; sid:200003835; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services.byebyecrm.com",nocase; classtype:attempted-recon; sid:200003836; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services.runescape.com-as.cz",nocase; classtype:attempted-recon; sid:200003837; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services.runescape.com-rse.ru",nocase; classtype:attempted-recon; sid:200003838; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services.runescape.com-rsu.ru",nocase; classtype:attempted-recon; sid:200003839; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicesbancaire.com",nocase; classtype:attempted-recon; sid:200003840; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviciosbndigitales.com",nocase; classtype:attempted-recon; sid:200003841; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servics.validationsecuradm.workers.dev",nocase; classtype:attempted-recon; sid:200003842; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servinform.quadientcloud.eu",nocase; classtype:attempted-recon; sid:200003843; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servisioclianticoreos-90991d.ingress-comporellon.easywp.com",nocase; classtype:attempted-recon; sid:200003844; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sess-security-outh2-ec2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003845; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sess-security-outh2-ec2.web.app",nocase; classtype:attempted-recon; sid:200003846; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setupmynorton.square.site",nocase; classtype:attempted-recon; sid:200003847; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seul.unilurio.ac.mz",nocase; classtype:attempted-recon; sid:200003848; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seuredmailportstatisticsirk1.web.app",nocase; classtype:attempted-recon; sid:200003849; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sevoudryserviciobomail.dudaone.com",nocase; classtype:attempted-recon; sid:200003850; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfc.com.vn",nocase; classtype:attempted-recon; sid:200003851; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfex12sec.web.app",nocase; classtype:attempted-recon; sid:200003852; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfrpanel.lws.fr",nocase; classtype:attempted-recon; sid:200003853; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgtbalde991-dot-still-dynamics-321006.ue.r.appspot.com",nocase; classtype:attempted-recon; sid:200003854; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shamajastore.co.ke",nocase; classtype:attempted-recon; sid:200003855; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shanky0.github.io",nocase; classtype:attempted-recon; sid:200003856; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shanza.epos.com.pk",nocase; classtype:attempted-recon; sid:200003857; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-eu1.hsforms.com",nocase; classtype:attempted-recon; sid:200003858; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-file.square.site",nocase; classtype:attempted-recon; sid:200003859; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharedfax815201376.wordpress.com",nocase; classtype:attempted-recon; sid:200003860; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointonedrivee.weebly.com",nocase; classtype:attempted-recon; sid:200003861; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointzx.000webhostapp.com",nocase; classtype:attempted-recon; sid:200003862; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sherlocksecurity.io",nocase; classtype:attempted-recon; sid:200003863; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shesowavyhair.com",nocase; classtype:attempted-recon; sid:200003864; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shiny-important-swift.glitch.me",nocase; classtype:attempted-recon; sid:200003865; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shipstorexpress.com",nocase; classtype:attempted-recon; sid:200003866; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shleta.com",nocase; classtype:attempted-recon; sid:200003867; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shop.cmfurnituremall.com",nocase; classtype:attempted-recon; sid:200003868; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shop.ewerest-stroi.ru",nocase; classtype:attempted-recon; sid:200003869; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shop1fybiliing.com",nocase; classtype:attempted-recon; sid:200003870; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopee-app.blogspot.com",nocase; classtype:attempted-recon; sid:200003871; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopeecoins.blogspot.com",nocase; classtype:attempted-recon; sid:200003872; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.1-gass.ajsdiaslda1.my.id",nocase; classtype:attempted-recon; sid:200003873; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shortyco.com",nocase; classtype:attempted-recon; sid:200003874; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasocn-info.com",nocase; classtype:attempted-recon; sid:200003875; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sidneyfcuorg.freshy.site",nocase; classtype:attempted-recon; sid:200003876; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-trk.empressmd.com",nocase; classtype:attempted-recon; sid:200003877; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signage.futuristic.agency",nocase; classtype:attempted-recon; sid:200003878; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signin-gcq7uwojrw58brcckylebjuy39nk2ivt65ol39k6ut6ura94zk.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200003879; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signin-payeer.com",nocase; classtype:attempted-recon; sid:200003880; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simbrex.ca",nocase; classtype:attempted-recon; sid:200003881; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simpkk.karanganyarkab.go.id",nocase; classtype:attempted-recon; sid:200003882; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sindarspen.org.br",nocase; classtype:attempted-recon; sid:200003883; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siporados15585.blogspot.com",nocase; classtype:attempted-recon; sid:200003884; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sirak.se",nocase; classtype:attempted-recon; sid:200003885; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site-4403463-3995-6112.mystrikingly.com",nocase; classtype:attempted-recon; sid:200003886; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9423623.92.webydo.com",nocase; classtype:attempted-recon; sid:200003887; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9423773.92.webydo.com",nocase; classtype:attempted-recon; sid:200003888; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9434107.92.webydo.com",nocase; classtype:attempted-recon; sid:200003889; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9548676.92.webydo.com",nocase; classtype:attempted-recon; sid:200003890; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9551459.92.webydo.com",nocase; classtype:attempted-recon; sid:200003891; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9552191.92.webydo.com",nocase; classtype:attempted-recon; sid:200003892; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9606042.92.webydo.com",nocase; classtype:attempted-recon; sid:200003893; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9606813.92.webydo.com",nocase; classtype:attempted-recon; sid:200003894; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder153771.dynadot.com",nocase; classtype:attempted-recon; sid:200003895; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder153799.dynadot.com",nocase; classtype:attempted-recon; sid:200003896; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder153911.dynadot.com",nocase; classtype:attempted-recon; sid:200003897; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder153925.dynadot.com",nocase; classtype:attempted-recon; sid:200003898; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder154171.dynadot.com",nocase; classtype:attempted-recon; sid:200003899; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder154702.dynadot.com",nocase; classtype:attempted-recon; sid:200003900; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder154829.dynadot.com",nocase; classtype:attempted-recon; sid:200003901; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"situs-facebook-resmi21.webnode.com",nocase; classtype:attempted-recon; sid:200003902; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"situs-layanan-pemulihan4.webnode.com",nocase; classtype:attempted-recon; sid:200003903; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"situs-pemulihan-resmi0.webnode.com",nocase; classtype:attempted-recon; sid:200003904; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sjdnfufbwrer.com",nocase; classtype:attempted-recon; sid:200003905; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skachatdp.000webhostapp.com",nocase; classtype:attempted-recon; sid:200003906; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinget.tk",nocase; classtype:attempted-recon; sid:200003907; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skiqthegames.com",nocase; classtype:attempted-recon; sid:200003908; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sklepkody.pl",nocase; classtype:attempted-recon; sid:200003909; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skradvanidance.business.site",nocase; classtype:attempted-recon; sid:200003910; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skygobank.com",nocase; classtype:attempted-recon; sid:200003911; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skymavis-accountupdate.com",nocase; classtype:attempted-recon; sid:200003912; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skymavis.company",nocase; classtype:attempted-recon; sid:200003913; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleepmaskz.com",nocase; classtype:attempted-recon; sid:200003914; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleepy-diffie.172-245-112-68.plesk.page",nocase; classtype:attempted-recon; sid:200003915; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slickparties.com",nocase; classtype:attempted-recon; sid:200003916; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slmkufeckf.jon-jensen.workers.dev",nocase; classtype:attempted-recon; sid:200003917; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slowlinebag.jp",nocase; classtype:attempted-recon; sid:200003918; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sm777.csb.app",nocase; classtype:attempted-recon; sid:200003919; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sman1melaya.sch.id",nocase; classtype:attempted-recon; sid:200003920; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sman9-garut.sch.id",nocase; classtype:attempted-recon; sid:200003921; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc-accout.com",nocase; classtype:attempted-recon; sid:200003922; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc-card.kikorigata.com",nocase; classtype:attempted-recon; sid:200003923; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc-veaiana.com",nocase; classtype:attempted-recon; sid:200003924; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbcwodeqingguoshoujicojp.top",nocase; classtype:attempted-recon; sid:200003925; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smeo.org.mx",nocase; classtype:attempted-recon; sid:200003926; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smgolamalif.github.io",nocase; classtype:attempted-recon; sid:200003927; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smkkesehatanjember.sch.id",nocase; classtype:attempted-recon; sid:200003928; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smmsvocal.yolasite.com",nocase; classtype:attempted-recon; sid:200003929; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sms-shorter.com",nocase; classtype:attempted-recon; sid:200003930; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsenligne.myfreesites.net",nocase; classtype:attempted-recon; sid:200003931; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsorangephonemail.myfreesites.net",nocase; classtype:attempted-recon; sid:200003932; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsorangesmsmessage.myfreesites.net",nocase; classtype:attempted-recon; sid:200003933; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smspccpa.com",nocase; classtype:attempted-recon; sid:200003934; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smss-mms.yolasite.com",nocase; classtype:attempted-recon; sid:200003935; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsverificationmms.myfreesites.net",nocase; classtype:attempted-recon; sid:200003936; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smwam.coms.cso.gov.tt",nocase; classtype:attempted-recon; sid:200003937; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy.martulangbelulalng.workers.dev",nocase; classtype:attempted-recon; sid:200003938; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snrsystem.com",nocase; classtype:attempted-recon; sid:200003939; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soaringskiesrentals.com",nocase; classtype:attempted-recon; sid:200003940; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soci-molen.web.app",nocase; classtype:attempted-recon; sid:200003941; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"socialpathogen.com",nocase; classtype:attempted-recon; sid:200003942; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"socialpinch.com",nocase; classtype:attempted-recon; sid:200003943; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"socreconfbc.com",nocase; classtype:attempted-recon; sid:200003944; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sofe-firma.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003945; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soft-cell-8148.updateloginprogram.workers.dev",nocase; classtype:attempted-recon; sid:200003946; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"softtouch-2022.web.app",nocase; classtype:attempted-recon; sid:200003947; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sognointerno.com",nocase; classtype:attempted-recon; sid:200003948; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sogo9848.weebly.com",nocase; classtype:attempted-recon; sid:200003949; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soladsnft.com",nocase; classtype:attempted-recon; sid:200003950; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solicitarfirmaelectronica-sv.com",nocase; classtype:attempted-recon; sid:200003951; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solyanayakomnata.ru",nocase; classtype:attempted-recon; sid:200003952; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sopac.org.py",nocase; classtype:attempted-recon; sid:200003953; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"souaxwaoh.myfreesites.net",nocase; classtype:attempted-recon; sid:200003954; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soude-masi.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003955; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufsont.blogspot.com",nocase; classtype:attempted-recon; sid:200003956; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soumya252000.github.io",nocase; classtype:attempted-recon; sid:200003957; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sounddirections.co.uk",nocase; classtype:attempted-recon; sid:200003958; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-hardy-magpie-334101.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200003959; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-manifest-design-330523.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200003960; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-my-project-90086352.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200003961; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-noted-minutia-330211.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200003962; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp39987.sitebeat.site",nocase; classtype:attempted-recon; sid:200003963; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp477389.sitebeat.site",nocase; classtype:attempted-recon; sid:200003964; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp701876.sitebeat.site",nocase; classtype:attempted-recon; sid:200003965; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spacemanagerent.webcindario.com",nocase; classtype:attempted-recon; sid:200003966; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spainwine.jp",nocase; classtype:attempted-recon; sid:200003967; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spark.shaheenwrites.com",nocase; classtype:attempted-recon; sid:200003968; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-vereinsbanken.xyz",nocase; classtype:attempted-recon; sid:200003969; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparxinteriors.co.zw",nocase; classtype:attempted-recon; sid:200003970; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spectrumstorageaccess.yahoosites.com",nocase; classtype:attempted-recon; sid:200003971; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spentamultimedia.com",nocase; classtype:attempted-recon; sid:200003972; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spider-zone.com",nocase; classtype:attempted-recon; sid:200003973; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spidertvapp.com",nocase; classtype:attempted-recon; sid:200003974; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spinlucky-season13.com",nocase; classtype:attempted-recon; sid:200003975; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spirit.gtwozone.com",nocase; classtype:attempted-recon; sid:200003976; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spiritlswap.finance",nocase; classtype:attempted-recon; sid:200003977; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spiritsvwap.finance",nocase; classtype:attempted-recon; sid:200003978; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spiritswap.digital",nocase; classtype:attempted-recon; sid:200003979; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk-panel.de",nocase; classtype:attempted-recon; sid:200003980; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sport-shoes.top",nocase; classtype:attempted-recon; sid:200003981; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sport.protected-secur.workers.dev",nocase; classtype:attempted-recon; sid:200003982; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sportsbrooks.top",nocase; classtype:attempted-recon; sid:200003983; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sportshoes.top",nocase; classtype:attempted-recon; sid:200003984; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sportybetpremium.wapka.co",nocase; classtype:attempted-recon; sid:200003985; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spring-pond-62c4.autocreative.workers.dev",nocase; classtype:attempted-recon; sid:200003986; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spring-pond-62c4.autocreative.workers.dev#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200003987; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprw.io",nocase; classtype:attempted-recon; sid:200003988; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srisritextiles.com",nocase; classtype:attempted-recon; sid:200003989; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srvr-cloudmail-srvr5s5wd3.pages.dev",nocase; classtype:attempted-recon; sid:200003990; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssdaz.sqqaepr.cn",nocase; classtype:attempted-recon; sid:200003991; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssia.org.sg",nocase; classtype:attempted-recon; sid:200003992; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssl.dsl.isl.mll.2kdkex.ravishamrah.ir",nocase; classtype:attempted-recon; sid:200003993; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sso-garena.com",nocase; classtype:attempted-recon; sid:200003994; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sswebmail-4w5twsr.web.app",nocase; classtype:attempted-recon; sid:200003995; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stage.vannaryfowler.com",nocase; classtype:attempted-recon; sid:200003996; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.eliteautomotive.com.au",nocase; classtype:attempted-recon; sid:200003997; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"standardupdatesupportandhelpcenter2021.ga",nocase; classtype:attempted-recon; sid:200003998; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staratlas.world",nocase; classtype:attempted-recon; sid:200003999; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starforsure.com",nocase; classtype:attempted-recon; sid:200004000; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starliker.net",nocase; classtype:attempted-recon; sid:200004001; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starsoftheindustry.com",nocase; classtype:attempted-recon; sid:200004002; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starttsboxfile.myfreesites.net",nocase; classtype:attempted-recon; sid:200004003; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stclarechurch.net",nocase; classtype:attempted-recon; sid:200004004; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunitus.com",nocase; classtype:attempted-recon; sid:200004005; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunyty.com.ru",nocase; classtype:attempted-recon; sid:200004006; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stephenmain.com",nocase; classtype:attempted-recon; sid:200004007; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddenbutik.com",nocase; classtype:attempted-recon; sid:200004008; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddenserbia.com",nocase; classtype:attempted-recon; sid:200004009; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddenshoe.net",nocase; classtype:attempted-recon; sid:200004010; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevencrews.com",nocase; classtype:attempted-recon; sid:200004011; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stgrp.ru",nocase; classtype:attempted-recon; sid:200004012; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stimulus-claim.com",nocase; classtype:attempted-recon; sid:200004013; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stjohnmarol.com",nocase; classtype:attempted-recon; sid:200004014; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stjudes.in",nocase; classtype:attempted-recon; sid:200004015; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stolizaparketa.ru",nocase; classtype:attempted-recon; sid:200004016; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stop-robots-pceol.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200004017; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storenike365.top",nocase; classtype:attempted-recon; sid:200004018; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stuartsfiddles.com",nocase; classtype:attempted-recon; sid:200004019; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"studio-lol.com",nocase; classtype:attempted-recon; sid:200004020; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stylifehomedecors.com",nocase; classtype:attempted-recon; sid:200004021; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stz-fmba.ru",nocase; classtype:attempted-recon; sid:200004022; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"subagan.com",nocase; classtype:attempted-recon; sid:200004023; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"successgroup.org",nocase; classtype:attempted-recon; sid:200004024; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sucuvirtcolba.com",nocase; classtype:attempted-recon; sid:200004025; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suelunn.com",nocase; classtype:attempted-recon; sid:200004026; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sugar.vantrust.cl",nocase; classtype:attempted-recon; sid:200004027; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suiviticket.co",nocase; classtype:attempted-recon; sid:200004028; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sultan-berbagi.duckdns.org",nocase; classtype:attempted-recon; sid:200004029; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sultan-raza.github.io",nocase; classtype:attempted-recon; sid:200004030; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sumpandtankcleaners.in",nocase; classtype:attempted-recon; sid:200004031; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunbeltmembers.com",nocase; classtype:attempted-recon; sid:200004032; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunge-ode.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004033; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunshineteam.in",nocase; classtype:attempted-recon; sid:200004034; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supermilhas.com",nocase; classtype:attempted-recon; sid:200004035; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supotsstunes.servehttp.com",nocase; classtype:attempted-recon; sid:200004036; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suppliers.bitshepherd.org",nocase; classtype:attempted-recon; sid:200004037; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-axiewallet.com",nocase; classtype:attempted-recon; sid:200004038; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-dapps.info",nocase; classtype:attempted-recon; sid:200004039; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-verify-mydevices.com",nocase; classtype:attempted-recon; sid:200004040; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supportdapps.com",nocase; classtype:attempted-recon; sid:200004041; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"survey18-aws.surveycenter.com",nocase; classtype:attempted-recon; sid:200004042; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"survey18-aws.toluna.com",nocase; classtype:attempted-recon; sid:200004043; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"svelte-kdy6dk.stackblitz.io",nocase; classtype:attempted-recon; sid:200004044; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swa-amazne.s3.sa-east-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200004045; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swanholm.net",nocase; classtype:attempted-recon; sid:200004046; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swap.elena.finance",nocase; classtype:attempted-recon; sid:200004047; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swapkucoin.com",nocase; classtype:attempted-recon; sid:200004048; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swappauto.staging.lcsolutions.it",nocase; classtype:attempted-recon; sid:200004049; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swear-shoes.com",nocase; classtype:attempted-recon; sid:200004050; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swiscomome.wpengine.com",nocase; classtype:attempted-recon; sid:200004051; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisscom.myfreesites.net",nocase; classtype:attempted-recon; sid:200004052; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisscomag.blogspot.com",nocase; classtype:attempted-recon; sid:200004053; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisspost-tracking-parcel.sirpryzecontinentalgroup.com",nocase; classtype:attempted-recon; sid:200004054; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synaxisreadymix.com",nocase; classtype:attempted-recon; sid:200004055; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncblox.live",nocase; classtype:attempted-recon; sid:200004056; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncdappconnect.com",nocase; classtype:attempted-recon; sid:200004057; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncmultidapp.com",nocase; classtype:attempted-recon; sid:200004058; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syr.us",nocase; classtype:attempted-recon; sid:200004059; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syracuseinfo.com",nocase; classtype:attempted-recon; sid:200004060; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"szolgaltatas-mkb.top",nocase; classtype:attempted-recon; sid:200004061; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"szybkiprzelew-24.pl",nocase; classtype:attempted-recon; sid:200004062; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tabernacleclever.com",nocase; classtype:attempted-recon; sid:200004063; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taher-mohamed-ahmed-saad.github.io",nocase; classtype:attempted-recon; sid:200004064; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talsethoghusby.am-strand.de",nocase; classtype:attempted-recon; sid:200004065; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tante-eunitejoa.duckdns.org",nocase; classtype:attempted-recon; sid:200004066; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taoistw345ie.co",nocase; classtype:attempted-recon; sid:200004067; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tarik-fitness.com",nocase; classtype:attempted-recon; sid:200004068; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tarscoin.net",nocase; classtype:attempted-recon; sid:200004069; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taxcare.page.link",nocase; classtype:attempted-recon; sid:200004070; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taxopus.com",nocase; classtype:attempted-recon; sid:200004071; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tb915hdh89.mfs.gg",nocase; classtype:attempted-recon; sid:200004072; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tbcs.com.vn",nocase; classtype:attempted-recon; sid:200004073; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tby.eb-sites.com",nocase; classtype:attempted-recon; sid:200004074; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcaa.impactfulmedia.com",nocase; classtype:attempted-recon; sid:200004075; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcaconnect.ac-page.com",nocase; classtype:attempted-recon; sid:200004076; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamgoogle125590.psee.ly",nocase; classtype:attempted-recon; sid:200004077; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tebapit.com",nocase; classtype:attempted-recon; sid:200004078; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecmachine.com.br",nocase; classtype:attempted-recon; sid:200004079; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecnominproductos.com",nocase; classtype:attempted-recon; sid:200004080; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teekitstorage.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200004081; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegramsecurityhelp.ru",nocase; classtype:attempted-recon; sid:200004082; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tellmeliu.github.io",nocase; classtype:attempted-recon; sid:200004083; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"templat65sldh.myfreesites.net",nocase; classtype:attempted-recon; sid:200004084; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teplonoginsk.ru",nocase; classtype:attempted-recon; sid:200004085; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teplovoz.uz",nocase; classtype:attempted-recon; sid:200004086; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terbaru-viral2022.duckdns.org",nocase; classtype:attempted-recon; sid:200004087; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terpelsicumple.com",nocase; classtype:attempted-recon; sid:200004088; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.bayoucitybadges.org",nocase; classtype:attempted-recon; sid:200004089; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.bitflye87.com",nocase; classtype:attempted-recon; sid:200004090; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.dxbproductions.com",nocase; classtype:attempted-recon; sid:200004091; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.webclient4.de",nocase; classtype:attempted-recon; sid:200004092; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teswebbk.duckdns.org",nocase; classtype:attempted-recon; sid:200004093; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"texasfreedomrun.com",nocase; classtype:attempted-recon; sid:200004094; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thanks-irs.sampocomplete.net",nocase; classtype:attempted-recon; sid:200004095; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thanks-purchase.complete-irs.net",nocase; classtype:attempted-recon; sid:200004096; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thawing-beach-63104.herokuapp.com",nocase; classtype:attempted-recon; sid:200004097; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theaceofspaeder.com",nocase; classtype:attempted-recon; sid:200004098; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theangryez.com",nocase; classtype:attempted-recon; sid:200004099; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thebananagg.com",nocase; classtype:attempted-recon; sid:200004100; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thebeachleague.com",nocase; classtype:attempted-recon; sid:200004101; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thechillipicklecanteen.com",nocase; classtype:attempted-recon; sid:200004102; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedecorindia.com",nocase; classtype:attempted-recon; sid:200004103; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedom.kg",nocase; classtype:attempted-recon; sid:200004104; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thehighcompliance.com",nocase; classtype:attempted-recon; sid:200004105; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thelatestnews.notabletorakutenlogin.top",nocase; classtype:attempted-recon; sid:200004106; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theneontree.in",nocase; classtype:attempted-recon; sid:200004107; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theofficialfrom.notabletorakutenlogin.monster",nocase; classtype:attempted-recon; sid:200004108; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thespiritualtransformation.com",nocase; classtype:attempted-recon; sid:200004109; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thestonecry.com",nocase; classtype:attempted-recon; sid:200004110; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thetayloredlifeblog.com",nocase; classtype:attempted-recon; sid:200004111; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thirdworldimports.com",nocase; classtype:attempted-recon; sid:200004112; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thomasdentalcentre.com",nocase; classtype:attempted-recon; sid:200004113; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"three-retail-live.devicetradein.co.uk",nocase; classtype:attempted-recon; sid:200004114; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thumbwork666.com",nocase; classtype:attempted-recon; sid:200004115; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thumbwork8.com",nocase; classtype:attempted-recon; sid:200004116; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tipografieonline.ro",nocase; classtype:attempted-recon; sid:200004117; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"titelinedrillingintl.yolasite.com",nocase; classtype:attempted-recon; sid:200004118; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tktrailerparts.com",nocase; classtype:attempted-recon; sid:200004119; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tlatx.com",nocase; classtype:attempted-recon; sid:200004120; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"to-ken.biz",nocase; classtype:attempted-recon; sid:200004121; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toanhoc247.edu.vn",nocase; classtype:attempted-recon; sid:200004122; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toddler-town.com",nocase; classtype:attempted-recon; sid:200004123; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toeram-panampiana-kaontyfanamarinanasyfiarovanapagas.my.id",nocase; classtype:attempted-recon; sid:200004124; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004125; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman1.web.app",nocase; classtype:attempted-recon; sid:200004126; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004127; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman10.web.app",nocase; classtype:attempted-recon; sid:200004128; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004129; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman12.web.app",nocase; classtype:attempted-recon; sid:200004130; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004131; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman2.web.app",nocase; classtype:attempted-recon; sid:200004132; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004133; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman3.web.app",nocase; classtype:attempted-recon; sid:200004134; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004135; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman4.web.app",nocase; classtype:attempted-recon; sid:200004136; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004137; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman5.web.app",nocase; classtype:attempted-recon; sid:200004138; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004139; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman6.web.app",nocase; classtype:attempted-recon; sid:200004140; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004141; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman7.web.app",nocase; classtype:attempted-recon; sid:200004142; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004143; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman8.web.app",nocase; classtype:attempted-recon; sid:200004144; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004145; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokumboman9.web.app",nocase; classtype:attempted-recon; sid:200004146; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tongdaiviettelbienhoa.com",nocase; classtype:attempted-recon; sid:200004147; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tooljerejin.airsite.co",nocase; classtype:attempted-recon; sid:200004148; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"top-up-codashop-gratis2022.duckdns.org",nocase; classtype:attempted-recon; sid:200004149; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"top10songsnews.com",nocase; classtype:attempted-recon; sid:200004150; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topearnersafrica.com",nocase; classtype:attempted-recon; sid:200004151; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topskills.ru",nocase; classtype:attempted-recon; sid:200004152; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"torccolborrachas.blogspot.com",nocase; classtype:attempted-recon; sid:200004153; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tqfygi.go2epal.com",nocase; classtype:attempted-recon; sid:200004154; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"traderjoexyz.info",nocase; classtype:attempted-recon; sid:200004155; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"traders-joesxyz.com",nocase; classtype:attempted-recon; sid:200004156; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradersjoe.xyz",nocase; classtype:attempted-recon; sid:200004157; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradeswarehouse.com",nocase; classtype:attempted-recon; sid:200004158; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"train-and-ride.com",nocase; classtype:attempted-recon; sid:200004159; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trams.mot.go.th",nocase; classtype:attempted-recon; sid:200004160; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trben.s3.eu-central-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200004161; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"triangarena-membership.ga",nocase; classtype:attempted-recon; sid:200004162; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribratanewsbondowoso.com",nocase; classtype:attempted-recon; sid:200004163; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribunbalikpapan.com",nocase; classtype:attempted-recon; sid:200004164; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"troyrich.com",nocase; classtype:attempted-recon; sid:200004165; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"truegrip.com",nocase; classtype:attempted-recon; sid:200004166; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trustpress.gr",nocase; classtype:attempted-recon; sid:200004167; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tumoneyextramovll.digital",nocase; classtype:attempted-recon; sid:200004168; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"txwnmdsbqghviqxpglgzjrgbzv-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200004169; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"typedream.site",nocase; classtype:attempted-recon; sid:200004170; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"typesmartlyocr.com",nocase; classtype:attempted-recon; sid:200004171; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyrecentre.ru",nocase; classtype:attempted-recon; sid:200004172; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u1581424.plsk.regruhosting.ru",nocase; classtype:attempted-recon; sid:200004173; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u18741649.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200004174; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u25233477.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200004175; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u25313422.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200004176; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u827857uw6.ha004.t.justns.ru",nocase; classtype:attempted-recon; sid:200004177; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ualsemantic.dualsemantics.net",nocase; classtype:attempted-recon; sid:200004178; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucbonline.com",nocase; classtype:attempted-recon; sid:200004179; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhdss.xkrx0o.cn",nocase; classtype:attempted-recon; sid:200004180; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhhff.cnza7b8.cn",nocase; classtype:attempted-recon; sid:200004181; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhncd.g7ug14s.cn",nocase; classtype:attempted-recon; sid:200004182; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhncd.n26k1al.cn",nocase; classtype:attempted-recon; sid:200004183; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhndd.9943s82.cn",nocase; classtype:attempted-recon; sid:200004184; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhns.mxyzy7i.cn",nocase; classtype:attempted-recon; sid:200004185; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhnxa.q83itv9.cn",nocase; classtype:attempted-recon; sid:200004186; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uhsgq.lrs.plus",nocase; classtype:attempted-recon; sid:200004187; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujdaa.fn3m4en.cn",nocase; classtype:attempted-recon; sid:200004188; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujds.5e8tn13.cn",nocase; classtype:attempted-recon; sid:200004189; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhd.21k0qik.cn",nocase; classtype:attempted-recon; sid:200004190; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhd.c0c4m46.cn",nocase; classtype:attempted-recon; sid:200004191; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhd.j419kr0.cn",nocase; classtype:attempted-recon; sid:200004192; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhd.kdsiuuc.cn",nocase; classtype:attempted-recon; sid:200004193; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhd.zkshmxt.cn",nocase; classtype:attempted-recon; sid:200004194; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhdd.cotf8p5.cn",nocase; classtype:attempted-recon; sid:200004195; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhf.m45h2q0.cn",nocase; classtype:attempted-recon; sid:200004196; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujhff.nkxefqp.cn",nocase; classtype:attempted-recon; sid:200004197; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukaz.me",nocase; classtype:attempted-recon; sid:200004198; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukcare.in",nocase; classtype:attempted-recon; sid:200004199; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umbrellaclubla.com",nocase; classtype:attempted-recon; sid:200004200; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unam.myfreesites.net",nocase; classtype:attempted-recon; sid:200004201; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"undefinedtrack.xyz",nocase; classtype:attempted-recon; sid:200004202; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniassessoria.com.br",nocase; classtype:attempted-recon; sid:200004203; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unicreditaustria.ucs.info",nocase; classtype:attempted-recon; sid:200004204; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unifacema.edu.br",nocase; classtype:attempted-recon; sid:200004205; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unionheightsresidental.com",nocase; classtype:attempted-recon; sid:200004206; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unisons.store",nocase; classtype:attempted-recon; sid:200004207; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unisonsouthayr.org.uk",nocase; classtype:attempted-recon; sid:200004208; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.ch",nocase; classtype:attempted-recon; sid:200004209; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.openwallet.dev",nocase; classtype:attempted-recon; sid:200004210; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.pages.dev",nocase; classtype:attempted-recon; sid:200004211; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.seal.finance",nocase; classtype:attempted-recon; sid:200004212; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.token.im",nocase; classtype:attempted-recon; sid:200004213; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.trading",nocase; classtype:attempted-recon; sid:200004214; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.v2.testnet.pulsechain.com",nocase; classtype:attempted-recon; sid:200004215; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswapfinancing.info",nocase; classtype:attempted-recon; sid:200004216; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unite38291.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200004217; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitedalliance-online.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004218; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"universidadsanjuan.ac",nocase; classtype:attempted-recon; sid:200004219; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unpocodearte.cl",nocase; classtype:attempted-recon; sid:200004220; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unregpayee-lb.com",nocase; classtype:attempted-recon; sid:200004221; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unsub.listhandlr.com",nocase; classtype:attempted-recon; sid:200004222; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upc-konto-service.boxmode.io",nocase; classtype:attempted-recon; sid:200004223; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updateseason.com",nocase; classtype:attempted-recon; sid:200004224; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatevoda-billing.com",nocase; classtype:attempted-recon; sid:200004225; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upgrade-25gb-email.thecornerstudio.com.au",nocase; classtype:attempted-recon; sid:200004226; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uplimere.xyz",nocase; classtype:attempted-recon; sid:200004227; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urgent-halifaxlogin.com",nocase; classtype:attempted-recon; sid:200004228; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urgentnotice.notabletorakutenlogin.cyou",nocase; classtype:attempted-recon; sid:200004229; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urgenttoinform.notabletorakutenlogin.cyou",nocase; classtype:attempted-recon; sid:200004230; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.m1n.app",nocase; classtype:attempted-recon; sid:200004231; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.xcode.no",nocase; classtype:attempted-recon; sid:200004232; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlzp.com",nocase; classtype:attempted-recon; sid:200004233; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-central1-custom-healer-338918.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200004234; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us.protecmeta.cf",nocase; classtype:attempted-recon; sid:200004235; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us.protecmeta.ga",nocase; classtype:attempted-recon; sid:200004236; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us.protecmeta.gq",nocase; classtype:attempted-recon; sid:200004237; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us.protecmeta.ml",nocase; classtype:attempted-recon; sid:200004238; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us.protecmeta.tk",nocase; classtype:attempted-recon; sid:200004239; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-paypal-unusual.com",nocase; classtype:attempted-recon; sid:200004240; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-paypal-unusual.net",nocase; classtype:attempted-recon; sid:200004241; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-paypal-unusual.org",nocase; classtype:attempted-recon; sid:200004242; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userboitevocalweb.flazio.com",nocase; classtype:attempted-recon; sid:200004243; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userinformationstoreupdatesmail.pages.dev",nocase; classtype:attempted-recon; sid:200004244; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usfn.net",nocase; classtype:attempted-recon; sid:200004245; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uswowgame.net",nocase; classtype:attempted-recon; sid:200004246; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uueer.7jgy5xe.cn",nocase; classtype:attempted-recon; sid:200004247; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uuid-validation.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200004248; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uukx0h0.cn",nocase; classtype:attempted-recon; sid:200004249; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uyhnxx.urpzkva.cn",nocase; classtype:attempted-recon; sid:200004250; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v-sys.mhlw.info",nocase; classtype:attempted-recon; sid:200004251; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v1and1-ionos-info-2hyeo.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200004252; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v3r1f1c4t10n-3m41ls3cur3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004253; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v3r1f1c4t10n-c3nt3rp4g3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004254; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v3r1f1c4t10n-s3rv3r4cc0unts.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004255; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v3r1f1c4t10ns-c3nt3rp4g3.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004256; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v3r1fyc3nt3r-1nf0rm4t10n.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004257; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v3r1fyp4g3s-1nf0m4t10n.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004258; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v5s09.comicat.ir",nocase; classtype:attempted-recon; sid:200004259; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vaccine-status-info.com",nocase; classtype:attempted-recon; sid:200004260; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vaiddzed.cc",nocase; classtype:attempted-recon; sid:200004261; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vakifdansizlere.co.vu",nocase; classtype:attempted-recon; sid:200004262; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valax-wallet.com",nocase; classtype:attempted-recon; sid:200004263; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valenciaoptometry.com",nocase; classtype:attempted-recon; sid:200004264; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valenteplay.com.br",nocase; classtype:attempted-recon; sid:200004265; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validacionpichincha.odoo.com",nocase; classtype:attempted-recon; sid:200004266; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validator-fzkiy.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200004267; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatordapps.info",nocase; classtype:attempted-recon; sid:200004268; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vallion.motiffliterature.me",nocase; classtype:attempted-recon; sid:200004269; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valorantium.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004270; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vayainteresante.com",nocase; classtype:attempted-recon; sid:200004271; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"velvish.com",nocase; classtype:attempted-recon; sid:200004272; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ventas.lnterbarnk.pe.esaspetrofund.org",nocase; classtype:attempted-recon; sid:200004273; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification.fb-page.workers.dev",nocase; classtype:attempted-recon; sid:200004274; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificationandsafetyaccountbusinesshelpcenter.co.vu",nocase; classtype:attempted-recon; sid:200004275; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificationmessage.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200004276; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-anda0011.weeblysite.com",nocase; classtype:attempted-recon; sid:200004277; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-facebook0022.weeblysite.com",nocase; classtype:attempted-recon; sid:200004278; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifocaoffa.webcindario.com",nocase; classtype:attempted-recon; sid:200004279; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"versement-fond.assc-bcn-boss.com",nocase; classtype:attempted-recon; sid:200004280; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"victorarath99.github.io",nocase; classtype:attempted-recon; sid:200004281; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vidavalplatf.space",nocase; classtype:attempted-recon; sid:200004282; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"videobigo.com",nocase; classtype:attempted-recon; sid:200004283; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"videoviralterbaru2022.duckdns.org",nocase; classtype:attempted-recon; sid:200004284; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vietlime.vn",nocase; classtype:attempted-recon; sid:200004285; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vietschi.de",nocase; classtype:attempted-recon; sid:200004286; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viettel-com-dot-c2c01-531c7.uc.r.appspot.com",nocase; classtype:attempted-recon; sid:200004287; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view.cjwdexp.cn",nocase; classtype:attempted-recon; sid:200004288; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinbpcfatfnkjftetwwkucfqsi-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200004289; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinivet.mk",nocase; classtype:attempted-recon; sid:200004290; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vipfbtools.com",nocase; classtype:attempted-recon; sid:200004291; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virginia-spi.com",nocase; classtype:attempted-recon; sid:200004292; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtual.itcostagrande.edu.mx",nocase; classtype:attempted-recon; sid:200004293; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtual1dattss.com",nocase; classtype:attempted-recon; sid:200004294; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vis-stort.github.io",nocase; classtype:attempted-recon; sid:200004295; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visa.co.jp.sexezv.xyz",nocase; classtype:attempted-recon; sid:200004296; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visione.co.id",nocase; classtype:attempted-recon; sid:200004297; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visionproperty.in",nocase; classtype:attempted-recon; sid:200004298; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk-authentification.ru",nocase; classtype:attempted-recon; sid:200004299; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk-golosvanie.ru",nocase; classtype:attempted-recon; sid:200004300; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk-vhods.co",nocase; classtype:attempted-recon; sid:200004301; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlaunchsupport.net",nocase; classtype:attempted-recon; sid:200004302; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vnuscollection.com",nocase; classtype:attempted-recon; sid:200004303; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voce.brdssuporte.xyz",nocase; classtype:attempted-recon; sid:200004304; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vodaupdatepayment.com",nocase; classtype:attempted-recon; sid:200004305; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volksbank-at-95f12.web.app",nocase; classtype:attempted-recon; sid:200004306; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volvocarskc.us1.list-manage.com",nocase; classtype:attempted-recon; sid:200004307; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbex.2m6cx.0detwhe.cn",nocase; classtype:attempted-recon; sid:200004308; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbex.2m6cx.3qn8504.cn",nocase; classtype:attempted-recon; sid:200004309; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbex.2m6cx.3yynmql.cn",nocase; classtype:attempted-recon; sid:200004310; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbex.2m6cx.7ulkaaf.cn",nocase; classtype:attempted-recon; sid:200004311; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbex.2m6cx.9srrdic.cn",nocase; classtype:attempted-recon; sid:200004312; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbexs.co.jp.q9wr7.dez8xra.cn",nocase; classtype:attempted-recon; sid:200004313; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbexs.co.jp.q9wr7.dwy80bm.cn",nocase; classtype:attempted-recon; sid:200004314; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbexs.co.jp.q9wr7.hcb5vmv.cn",nocase; classtype:attempted-recon; sid:200004315; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbexs.co.jp.q9wr7.jslnjd2.cn",nocase; classtype:attempted-recon; sid:200004316; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-inbexs.co.jp.q9wr7.k8lspd3.cn",nocase; classtype:attempted-recon; sid:200004317; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-index.co.jp.zx52c6.4lbnrfe.cn",nocase; classtype:attempted-recon; sid:200004318; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-index.co.jp.zx52c6.4xbnqca.cn",nocase; classtype:attempted-recon; sid:200004319; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-index.co.jp.zx52c6.5mnlhtv.cn",nocase; classtype:attempted-recon; sid:200004320; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-index.co.jp.zx52c6.rxtpcsr.cn",nocase; classtype:attempted-recon; sid:200004321; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpasss-ne-index.ty5e9kj.49u46d.cn",nocase; classtype:attempted-recon; sid:200004322; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbex.s6g5sh.dcj30pz.cn",nocase; classtype:attempted-recon; sid:200004323; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbex.s6g5sh.j1a9lvu.cn",nocase; classtype:attempted-recon; sid:200004324; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbex.s6g5sh.kb3pyys.cn",nocase; classtype:attempted-recon; sid:200004325; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbex.s6g5sh.l7z1e1f.cn",nocase; classtype:attempted-recon; sid:200004326; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbex.s6g5sh.nsflppp.cn",nocase; classtype:attempted-recon; sid:200004327; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbexco.jp.h2a6re.kpygwsf.cn",nocase; classtype:attempted-recon; sid:200004328; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbexco.jp.h2a6re.skmsceo.cn",nocase; classtype:attempted-recon; sid:200004329; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbexco.jp.h2a6re.tz96ok5.cn",nocase; classtype:attempted-recon; sid:200004330; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbexco.jp.h2a6re.wa0fril.cn",nocase; classtype:attempted-recon; sid:200004331; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-inbexco.jp.h2a6re.ypqumpe.cn",nocase; classtype:attempted-recon; sid:200004332; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.62805mk.cn",nocase; classtype:attempted-recon; sid:200004333; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.7epytaf.cn",nocase; classtype:attempted-recon; sid:200004334; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.90y9dg.cn",nocase; classtype:attempted-recon; sid:200004335; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.i69b1uk0.cn",nocase; classtype:attempted-recon; sid:200004336; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.j9g9fs7.cn",nocase; classtype:attempted-recon; sid:200004337; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.spd5579.cn",nocase; classtype:attempted-recon; sid:200004338; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-index.co.jp.rw59g.t9s9ccl.cn",nocase; classtype:attempted-recon; sid:200004339; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vposs-ne-indexs.co.jp.q9wr7.k8lspd3.cn",nocase; classtype:attempted-recon; sid:200004340; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vqwd.soboja1994.workers.dev",nocase; classtype:attempted-recon; sid:200004341; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vr-banking-app.de",nocase; classtype:attempted-recon; sid:200004342; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vr-updates54056.com",nocase; classtype:attempted-recon; sid:200004343; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtekllc.com",nocase; classtype:attempted-recon; sid:200004344; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtxmail2018.myfreesites.net",nocase; classtype:attempted-recon; sid:200004345; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vugik.mecil33784.workers.dev",nocase; classtype:attempted-recon; sid:200004346; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvpaes-me-index.egvtpp.cn",nocase; classtype:attempted-recon; sid:200004347; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvvvv.barndoorreflections.com",nocase; classtype:attempted-recon; sid:200004348; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vww-roblox.com",nocase; classtype:attempted-recon; sid:200004349; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxdse.myfreesites.net",nocase; classtype:attempted-recon; sid:200004350; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vzn-etfd.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004351; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w2.deraya.org",nocase; classtype:attempted-recon; sid:200004352; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w5aproject.s3.us-east.cloud-object-storage.appdomain.cloud",nocase; classtype:attempted-recon; sid:200004353; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wahed-koudsi2001.github.io",nocase; classtype:attempted-recon; sid:200004354; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walkers-dot-composite-store-326315.uk.r.appspot.com",nocase; classtype:attempted-recon; sid:200004355; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walldesign.com.tr",nocase; classtype:attempted-recon; sid:200004356; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallectonnect.com",nocase; classtype:attempted-recon; sid:200004357; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-connect012.web.app",nocase; classtype:attempted-recon; sid:200004358; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-polygn.technologys.uk",nocase; classtype:attempted-recon; sid:200004359; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-polygonchain.life",nocase; classtype:attempted-recon; sid:200004360; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-polyigon-conecte-prensatermica.pagedemo.co",nocase; classtype:attempted-recon; sid:200004361; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-reconnection.xyz",nocase; classtype:attempted-recon; sid:200004362; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.silesiacoin.com",nocase; classtype:attempted-recon; sid:200004363; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectauthenticator.com",nocase; classtype:attempted-recon; sid:200004364; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectauthorise.net",nocase; classtype:attempted-recon; sid:200004365; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnecttbot.com",nocase; classtype:attempted-recon; sid:200004366; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walleterrorsupport.com",nocase; classtype:attempted-recon; sid:200004367; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletfixdapp.com",nocase; classtype:attempted-recon; sid:200004368; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletlinking.web.app",nocase; classtype:attempted-recon; sid:200004369; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsconnectsecure.com",nocase; classtype:attempted-recon; sid:200004370; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsconnex.com",nocase; classtype:attempted-recon; sid:200004371; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletstatements.co",nocase; classtype:attempted-recon; sid:200004372; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsynclive.com",nocase; classtype:attempted-recon; sid:200004373; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletvalidation.me",nocase; classtype:attempted-recon; sid:200004374; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletvalidators.com",nocase; classtype:attempted-recon; sid:200004375; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walllet-avax.com",nocase; classtype:attempted-recon; sid:200004376; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallnet-avax.com",nocase; classtype:attempted-recon; sid:200004377; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walmartm.myshoplaza.com",nocase; classtype:attempted-recon; sid:200004378; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wana78420.myfreesites.net",nocase; classtype:attempted-recon; sid:200004379; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wangluofuwu.webnode.page",nocase; classtype:attempted-recon; sid:200004380; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wap.bitffybtcer.club",nocase; classtype:attempted-recon; sid:200004381; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wap.bitffybtcer.xyz",nocase; classtype:attempted-recon; sid:200004382; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wap.bitflyer.plus",nocase; classtype:attempted-recon; sid:200004383; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wap.bitflyer.venus.kim",nocase; classtype:attempted-recon; sid:200004384; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wap.btcffybtcer.com",nocase; classtype:attempted-recon; sid:200004385; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warningshadows.org",nocase; classtype:attempted-recon; sid:200004386; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warsa.bandungkab.go.id",nocase; classtype:attempted-recon; sid:200004387; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wbacess1prim3.com",nocase; classtype:attempted-recon; sid:200004388; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"we-exodus-wallet.yahoosites.com",nocase; classtype:attempted-recon; sid:200004389; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wealthpathbank.com",nocase; classtype:attempted-recon; sid:200004390; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wearegty.com",nocase; classtype:attempted-recon; sid:200004391; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-armas.royale-freefire1garena-bonus.com",nocase; classtype:attempted-recon; sid:200004392; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-b4119.web.app",nocase; classtype:attempted-recon; sid:200004393; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-e1f6d.web.app",nocase; classtype:attempted-recon; sid:200004394; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-exoduss.com",nocase; classtype:attempted-recon; sid:200004395; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-f6612.web.app",nocase; classtype:attempted-recon; sid:200004396; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-ml01.web.app",nocase; classtype:attempted-recon; sid:200004397; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.bredbanque.trans.sylog.co",nocase; classtype:attempted-recon; sid:200004398; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.logodesign.net",nocase; classtype:attempted-recon; sid:200004399; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.royale-freefire1garena-bonus.com",nocase; classtype:attempted-recon; sid:200004400; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.smartencryptbridge.live",nocase; classtype:attempted-recon; sid:200004401; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web7376.web07.bero-webspace.de",nocase; classtype:attempted-recon; sid:200004402; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web7384.web07.bero-webspace.de",nocase; classtype:attempted-recon; sid:200004403; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web9566.cweb01.gamingweb.de",nocase; classtype:attempted-recon; sid:200004404; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webbbb.yolasite.com",nocase; classtype:attempted-recon; sid:200004405; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webbl.yolasite.com",nocase; classtype:attempted-recon; sid:200004406; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdappsconnection.com",nocase; classtype:attempted-recon; sid:200004407; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdatamltrainingdiag842.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200004408; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdesecure.clickfunnels.com",nocase; classtype:attempted-recon; sid:200004409; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdesignat.ch",nocase; classtype:attempted-recon; sid:200004410; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webip.yolasite.com",nocase; classtype:attempted-recon; sid:200004411; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-103.weeblysite.com",nocase; classtype:attempted-recon; sid:200004412; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-sso8uyg.web.app",nocase; classtype:attempted-recon; sid:200004413; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.gourmer.co.in",nocase; classtype:attempted-recon; sid:200004414; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.login.access.docs67.live",nocase; classtype:attempted-recon; sid:200004415; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailadmin0.myfreesites.net",nocase; classtype:attempted-recon; sid:200004416; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webregular.xyz",nocase; classtype:attempted-recon; sid:200004417; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"website2c.com",nocase; classtype:attempted-recon; sid:200004418; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"websitefun.club",nocase; classtype:attempted-recon; sid:200004419; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webstories.eu",nocase; classtype:attempted-recon; sid:200004420; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webtechnologists.in",nocase; classtype:attempted-recon; sid:200004421; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webvalidity.com",nocase; classtype:attempted-recon; sid:200004422; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weteachbh.com",nocase; classtype:attempted-recon; sid:200004423; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whare.100webspace.net",nocase; classtype:attempted-recon; sid:200004424; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whatsapp-group23.duckdns.org",nocase; classtype:attempted-recon; sid:200004425; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wheelsofmercy.org",nocase; classtype:attempted-recon; sid:200004426; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whitelist-network.com",nocase; classtype:attempted-recon; sid:200004427; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"widadkamillah.github.io",nocase; classtype:attempted-recon; sid:200004428; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"widbly.xyz",nocase; classtype:attempted-recon; sid:200004429; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wiki4pc.com",nocase; classtype:attempted-recon; sid:200004430; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"windstream-net.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004431; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wireconfirmation68c10a25442a3e13.blogspot.com",nocase; classtype:attempted-recon; sid:200004432; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wires-business-starter.webflow.io",nocase; classtype:attempted-recon; sid:200004433; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wirtschaft.baesweiler.de",nocase; classtype:attempted-recon; sid:200004434; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wjkgk.lrs.plus",nocase; classtype:attempted-recon; sid:200004435; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wkazisan.github.io",nocase; classtype:attempted-recon; sid:200004436; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"womancreatorofman.com",nocase; classtype:attempted-recon; sid:200004437; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wordpad.namuichi.com",nocase; classtype:attempted-recon; sid:200004438; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"work.canvasolutions.co.uk",nocase; classtype:attempted-recon; sid:200004439; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"workprotocoles-com.webs.com",nocase; classtype:attempted-recon; sid:200004440; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wow.jetos.com",nocase; classtype:attempted-recon; sid:200004441; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wp-login.azurewebsites.net",nocase; classtype:attempted-recon; sid:200004442; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpagroup.com.au",nocase; classtype:attempted-recon; sid:200004443; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpastudio.net",nocase; classtype:attempted-recon; sid:200004444; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpsoar.com",nocase; classtype:attempted-recon; sid:200004445; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqass-index.pygbw.cn",nocase; classtype:attempted-recon; sid:200004446; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wrww-roblox.com",nocase; classtype:attempted-recon; sid:200004447; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wtrans-bb6.web.app",nocase; classtype:attempted-recon; sid:200004448; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wtrcomputers.com",nocase; classtype:attempted-recon; sid:200004449; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvonderland.com",nocase; classtype:attempted-recon; sid:200004450; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww.prestamosenlinea.interbank.pe.com.zg-telematic.com",nocase; classtype:attempted-recon; sid:200004451; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww.prestamosenlinea.interbank.pe.nablucknow.com",nocase; classtype:attempted-recon; sid:200004452; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww2.interbankokc.com",nocase; classtype:attempted-recon; sid:200004453; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwv-bombcrypto-log.com",nocase; classtype:attempted-recon; sid:200004454; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwvv-roblcx.com",nocase; classtype:attempted-recon; sid:200004455; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-cursosdigitalesmx-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004456; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-degelyehuda-org-il.filesusr.com",nocase; classtype:attempted-recon; sid:200004457; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004458; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-europessign-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004459; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-falabella-cl.entrepreneurshipfoundationinc.org",nocase; classtype:attempted-recon; sid:200004460; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-jaccs-co-jp.thetobaccotin.com",nocase; classtype:attempted-recon; sid:200004461; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-key-com.test.edgekey.net",nocase; classtype:attempted-recon; sid:200004462; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-shopeemy.blogspot.com",nocase; classtype:attempted-recon; sid:200004463; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.etc-meisai.jploginx6sf8g.amdy.com.cn",nocase; classtype:attempted-recon; sid:200004464; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.etc-meisai.jploginx6sf8g.sslmfc.cn",nocase; classtype:attempted-recon; sid:200004465; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jp.mercaris.logincvx8dsf6.hxwwjtm.cn",nocase; classtype:attempted-recon; sid:200004466; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwdd715.com",nocase; classtype:attempted-recon; sid:200004467; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wzcxx.com",nocase; classtype:attempted-recon; sid:200004468; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xcasd.7vo6bt.cn",nocase; classtype:attempted-recon; sid:200004469; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xcrosssupport.center",nocase; classtype:attempted-recon; sid:200004470; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xcvdsd.page.link",nocase; classtype:attempted-recon; sid:200004471; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xid-human-validation.run-us-west2.goorm.io",nocase; classtype:attempted-recon; sid:200004472; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj333.mjt.lu",nocase; classtype:attempted-recon; sid:200004473; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj33s.mjt.lu",nocase; classtype:attempted-recon; sid:200004474; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj33w.mjt.lu",nocase; classtype:attempted-recon; sid:200004475; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj3pr.mjt.lu",nocase; classtype:attempted-recon; sid:200004476; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj45g.mjt.lu",nocase; classtype:attempted-recon; sid:200004477; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj45o.mjt.lu",nocase; classtype:attempted-recon; sid:200004478; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xj4og.mjt.lu",nocase; classtype:attempted-recon; sid:200004479; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xjmr7.mjt.lu",nocase; classtype:attempted-recon; sid:200004480; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xjpyyds.pem4yp3.cn",nocase; classtype:attempted-recon; sid:200004481; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--gmal-sya.com",nocase; classtype:attempted-recon; sid:200004482; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--hzlldijitllgirisbildirim-qvdd.com",nocase; classtype:attempted-recon; sid:200004483; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--ltappen-80a.se",nocase; classtype:attempted-recon; sid:200004484; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--metamsk-lwa.link",nocase; classtype:attempted-recon; sid:200004485; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--rpondeur-sfr2-bhb.yolasite.com",nocase; classtype:attempted-recon; sid:200004486; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xsbrookshhjx.top",nocase; classtype:attempted-recon; sid:200004487; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xserver-vps.kiriiku.jp",nocase; classtype:attempted-recon; sid:200004488; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xtio.ch",nocase; classtype:attempted-recon; sid:200004489; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xtw42.mjt.lu",nocase; classtype:attempted-recon; sid:200004490; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxasd.sf29hrg.cn",nocase; classtype:attempted-recon; sid:200004491; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxx-com-dot-c2c01-531c7.uc.r.appspot.com",nocase; classtype:attempted-recon; sid:200004492; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@bhgxa.eo76sni.cn",nocase; classtype:attempted-recon; sid:200004493; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@jhdd.fjcslad.cn",nocase; classtype:attempted-recon; sid:200004494; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@kjhdda.tetfeec.cn",nocase; classtype:attempted-recon; sid:200004495; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@lkjds.nlmwjta.cn",nocase; classtype:attempted-recon; sid:200004496; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@poklsa.slodddz.cn",nocase; classtype:attempted-recon; sid:200004497; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@qweas.p6rhddj.cn",nocase; classtype:attempted-recon; sid:200004498; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@ssdaz.sqqaepr.cn",nocase; classtype:attempted-recon; sid:200004499; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@uhnxa.q83itv9.cn",nocase; classtype:attempted-recon; sid:200004500; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@ujdaa.fn3m4en.cn",nocase; classtype:attempted-recon; sid:200004501; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@ujds.5e8tn13.cn",nocase; classtype:attempted-recon; sid:200004502; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@uyhnxx.urpzkva.cn",nocase; classtype:attempted-recon; sid:200004503; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo-verify-emailing.ml",nocase; classtype:attempted-recon; sid:200004504; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahuomall.square.site",nocase; classtype:attempted-recon; sid:200004505; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yairix.github.io",nocase; classtype:attempted-recon; sid:200004506; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yalena.me",nocase; classtype:attempted-recon; sid:200004507; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yaqoobi.org",nocase; classtype:attempted-recon; sid:200004508; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yayanti.com",nocase; classtype:attempted-recon; sid:200004509; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yelloportailmobilea222.yolasite.com",nocase; classtype:attempted-recon; sid:200004510; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yenghesssyy.cf",nocase; classtype:attempted-recon; sid:200004511; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yhbndd.ryyswjn.cn",nocase; classtype:attempted-recon; sid:200004512; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yhddf.vtf23ic.cn",nocase; classtype:attempted-recon; sid:200004513; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yhdff.iw6fwu.cn",nocase; classtype:attempted-recon; sid:200004514; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yiaswqjdtcyeqpvyqthijepeai-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200004515; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yieldguoldi.com",nocase; classtype:attempted-recon; sid:200004516; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ykm.de",nocase; classtype:attempted-recon; sid:200004517; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ykyevmqxaktnfgrtuufymkhnce-dot-gl44393333333.rj.r.appspot.com",nocase; classtype:attempted-recon; sid:200004518; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yma1ll0g0n.odoo.com",nocase; classtype:attempted-recon; sid:200004519; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yndda.m117s1s.cn",nocase; classtype:attempted-recon; sid:200004520; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogeshwarwiremesh.com",nocase; classtype:attempted-recon; sid:200004521; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"youknowar.com",nocase; classtype:attempted-recon; sid:200004522; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yoursatus.namecomplete.net",nocase; classtype:attempted-recon; sid:200004523; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yy69897.amazooncort.vip",nocase; classtype:attempted-recon; sid:200004524; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"z0massegurabclp1.shreeramwoodindustries.com",nocase; classtype:attempted-recon; sid:200004525; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"z2qje.codesandbox.io",nocase; classtype:attempted-recon; sid:200004526; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zackselectronics.co.zw",nocase; classtype:attempted-recon; sid:200004527; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zb2-home.web.app",nocase; classtype:attempted-recon; sid:200004528; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zepe.io",nocase; classtype:attempted-recon; sid:200004529; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zepeapp.com",nocase; classtype:attempted-recon; sid:200004530; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeroquiz.com",nocase; classtype:attempted-recon; sid:200004531; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zgyyds.mm5p1ch.cn",nocase; classtype:attempted-recon; sid:200004532; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zgyyds.nebl4zw.cn",nocase; classtype:attempted-recon; sid:200004533; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zhrmghgyyds.h0tlexl.cn",nocase; classtype:attempted-recon; sid:200004534; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zidazabi22.clickfunnels.com",nocase; classtype:attempted-recon; sid:200004535; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbriii.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004536; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zjzj6688.yihang.ren",nocase; classtype:attempted-recon; sid:200004537; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonmca.hxljatvw.cn",nocase; classtype:attempted-recon; sid:200004538; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zqjaz5.go2epal.com",nocase; classtype:attempted-recon; sid:200004539; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zurichcantonal.com",nocase; classtype:attempted-recon; sid:200004540; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zxsfus.com",nocase; classtype:attempted-recon; sid:200004541; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0333fa5.netsolhost.com",nocase; http_uri; content:"/comcast/xfinity.php?d1193169ba22c33594765d16035661b1=&\;email=a@a.c&\;.rand=login.xfinity.com.aspx",nocase; classtype:attempted-recon; sid:200004542; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"045a3c0.wcomhost.com",nocase; http_uri; content:"/ameli-assurance/remboursement/login/iframe-page2.html",nocase; classtype:attempted-recon; sid:200004543; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/",nocase; classtype:attempted-recon; sid:200004544; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php",nocase; classtype:attempted-recon; sid:200004545; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?0aa057c65ef07378468e5f9e3a789bfb=",nocase; classtype:attempted-recon; sid:200004546; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?11b4fee625013f2cf56532dc5863c9ab=",nocase; classtype:attempted-recon; sid:200004547; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?139b1011239274f3b80c96980c21139b=",nocase; classtype:attempted-recon; sid:200004548; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?142a28f9d57deaf321444619e2b01350=",nocase; classtype:attempted-recon; sid:200004549; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?158f26a702885208d3636c86e65ac7d2=",nocase; classtype:attempted-recon; sid:200004550; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?16448d8a8156dafe68974ea7841c21ce=",nocase; classtype:attempted-recon; sid:200004551; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?1a7a4f6f299b4b5a8143a4173574724b=",nocase; classtype:attempted-recon; sid:200004552; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?210516a1bcb3aecc863d563cbb9f2c74=",nocase; classtype:attempted-recon; sid:200004553; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?255dd81dec351ba8ec110f96dff196b9=",nocase; classtype:attempted-recon; sid:200004554; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"048618c.netsolhost.com",nocase; http_uri; content:"/chase/secure.php?2616f40fc577ab9495c8c471ae727075=",nocase; classtype:attempted-recon; sid:200004555; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"215.7.198.35.bc.googleusercontent.com",nocase; http_uri; content:"/sinbc/?auth=z7d1ckpxaxqtjztlmyoc4cfloyvu1tvpyv9kdkjlf2sdjoariyvgtjjnt5h6qqksegfs4kfuqr7pel7kfdrsg",nocase; classtype:attempted-recon; sid:200004556; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"28ecne20f9u.securetnet.com",nocase; http_uri; content:"/bbva/592cf4/425bdbd3-91cf-4e9f-9498-7a06b3ad75ec/?test=1",nocase; classtype:attempted-recon; sid:200004557; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3rdstreetmarket.com",nocase; http_uri; content:"/wp-content/themes/3rdst/8-login-form/",nocase; classtype:attempted-recon; sid:200004558; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a-q-f.com",nocase; http_uri; content:"/openpc/directlogin.do",nocase; classtype:attempted-recon; sid:200004559; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.60b7ac265566e3da4341f765b2d2a73200f8f1db57b0b005a1afdc00.com",nocase; http_uri; content:"/signin",nocase; classtype:attempted-recon; sid:200004560; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abre.ai",nocase; http_uri; content:"/dpn7?userid=y8zcius2",nocase; classtype:attempted-recon; sid:200004561; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?passive=1209600&continue=https://sites.google.com/view/viewbill-bt-1/bt&followup=https://sites.google.com/view/viewbill-bt-1/bt",nocase; classtype:attempted-recon; sid:200004562; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman2.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman2.html",nocase; classtype:attempted-recon; sid:200004563; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html&followup=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html",nocase; classtype:attempted-recon; sid:200004564; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html&followup=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200004565; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html&followup=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html",nocase; classtype:attempted-recon; sid:200004566; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/officpcpspbcncuser.appspot.com/index.htm&followup=https://storage.cloud.google.com/officpcpspbcncuser.appspot.com/index.htm",nocase; classtype:attempted-recon; sid:200004567; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin.fifoundry.net",nocase; http_uri; content:"/en/bellcocreditunion/",nocase; classtype:attempted-recon; sid:200004568; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aijcs.blogspot.com",nocase; http_uri; content:"/2005/03/colourful-life-of-aij.html",nocase; classtype:attempted-recon; sid:200004569; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alinachopra.com",nocase; http_uri; content:"/blog/wp-content/themes/10/",nocase; classtype:attempted-recon; sid:200004570; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambrosecourt.com",nocase; http_uri; content:"/our/ourtime/ourtime.html",nocase; classtype:attempted-recon; sid:200004571; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ams3.digitaloceanspaces.com",nocase; http_uri; content:"/njk/25_40_24_5e_40_26_40_26_28_29_23_23_5e_23_24_26_5e_25_26_40_5e_28_23_26.html",nocase; classtype:attempted-recon; sid:200004572; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anekaslot.com",nocase; http_uri; content:"/jps/webmail_reset.htm",nocase; classtype:attempted-recon; sid:200004573; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.addthis.com",nocase; http_uri; content:"/oexchange/0.8/wrap/opengraph?url=ahr0chm6ly93zxetnmrlodiud2vilmfwcc8znzg1mje5lze1lziwmjfjdw5plmn6nto1nibbttu6ntygqu13zwjtyxn0zxi5lze1lziwmjeznzg1mjfjdw5plmn6nto1nibbttu6ntygqu13zwjtyxn0zxiznzg1mje5lze1lziwmjfjdw5plmn6nto1nibbttu6ntygqu0znzg1mjf3zwjtyxn0zxi5lze1lziwmjfjdw5plmn6nto1nibbttm3oduymtu6ntygqu13zwjtyxn0zxiznzg1mjejd2vibwfzdgvyqgn1bmkuy3o=",nocase; classtype:attempted-recon; sid:200004574; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-cbe5bd07-dcf6-4118-8cd1-94cac7579f6c.cleverapps.io",nocase; http_uri; content:"/de/207f52bbe96e420/login.php#_207f52bbe96e42014",nocase; classtype:attempted-recon; sid:200004575; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/b9fu9axf9rcv7bhjp80fpcm8zna5wcwi",nocase; classtype:attempted-recon; sid:200004576; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/x6agocx9zvj049azirk4aw3xrqdedqhl",nocase; classtype:attempted-recon; sid:200004577; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/ymr0ltw3hmn8icxebz16gjhcyhqa49w4",nocase; classtype:attempted-recon; sid:200004578; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pipefy.com",nocase; http_uri; content:"/public/form/xlfe4rw2",nocase; classtype:attempted-recon; sid:200004579; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asaw.ams3.digitaloceanspaces.com",nocase; http_uri; content:"/fowaf.html?email=kenneth.yu@meritor.com",nocase; classtype:attempted-recon; sid:200004580; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-yahoo.meculinkvolt.com",nocase; http_uri; content:"/at&t/",nocase; classtype:attempted-recon; sid:200004581; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azeioaz.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200004582; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baovesusonglcxt.com",nocase; http_uri; content:"/wp-includes/index.html",nocase; classtype:attempted-recon; sid:200004583; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bardaiconnect.com",nocase; http_uri; content:"/app/listeners/ae/n-nv6588123/ae/ae/verify/sms.php",nocase; classtype:attempted-recon; sid:200004584; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baritasonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200004585; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fr3kf",nocase; classtype:attempted-recon; sid:200004586; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/frxsz",nocase; classtype:attempted-recon; sid:200004587; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fsf6l",nocase; classtype:attempted-recon; sid:200004588; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ftce9",nocase; classtype:attempted-recon; sid:200004589; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ftjbi",nocase; classtype:attempted-recon; sid:200004590; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ftjra",nocase; classtype:attempted-recon; sid:200004591; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly.",nocase; http_uri; content:"/3ijwsm2",nocase; classtype:attempted-recon; sid:200004592; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2iz03nf",nocase; classtype:attempted-recon; sid:200004593; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2kduy2u",nocase; classtype:attempted-recon; sid:200004594; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2nog4ow?facebook_update",nocase; classtype:attempted-recon; sid:200004595; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2nwrbgj",nocase; classtype:attempted-recon; sid:200004596; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2oq6dhz",nocase; classtype:attempted-recon; sid:200004597; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2p28z0h",nocase; classtype:attempted-recon; sid:200004598; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2q7fcpg",nocase; classtype:attempted-recon; sid:200004599; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2uwvcnh",nocase; classtype:attempted-recon; sid:200004600; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2vuwbzk",nocase; classtype:attempted-recon; sid:200004601; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2wqlrea",nocase; classtype:attempted-recon; sid:200004602; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2zaee65",nocase; classtype:attempted-recon; sid:200004603; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2zejaht",nocase; classtype:attempted-recon; sid:200004604; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2zomh31?confirmation",nocase; classtype:attempted-recon; sid:200004605; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/30ceyfq",nocase; classtype:attempted-recon; sid:200004606; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/30dwddq",nocase; classtype:attempted-recon; sid:200004607; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/30vy89r",nocase; classtype:attempted-recon; sid:200004608; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/319qtui",nocase; classtype:attempted-recon; sid:200004609; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/31cwtqd?facebook_update",nocase; classtype:attempted-recon; sid:200004610; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/31d3mp6?facebook_service",nocase; classtype:attempted-recon; sid:200004611; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/31xebzq",nocase; classtype:attempted-recon; sid:200004612; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/33ipjf7",nocase; classtype:attempted-recon; sid:200004613; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/33pcwtj",nocase; classtype:attempted-recon; sid:200004614; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/34mhgdg",nocase; classtype:attempted-recon; sid:200004615; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/37r8zo3",nocase; classtype:attempted-recon; sid:200004616; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/38xmo4d",nocase; classtype:attempted-recon; sid:200004617; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/392hszz",nocase; classtype:attempted-recon; sid:200004618; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3aetm80",nocase; classtype:attempted-recon; sid:200004619; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3afo6kx",nocase; classtype:attempted-recon; sid:200004620; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3an4lcn",nocase; classtype:attempted-recon; sid:200004621; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3aqvwmn",nocase; classtype:attempted-recon; sid:200004622; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3bdkpfx?facebook_update",nocase; classtype:attempted-recon; sid:200004623; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3bmjhx1?confirmation",nocase; classtype:attempted-recon; sid:200004624; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3bq4stv?confirmation",nocase; classtype:attempted-recon; sid:200004625; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3bsgkin",nocase; classtype:attempted-recon; sid:200004626; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3bvwofv?confirmation",nocase; classtype:attempted-recon; sid:200004627; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3c7nozm",nocase; classtype:attempted-recon; sid:200004628; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ca8owp?facebook_update",nocase; classtype:attempted-recon; sid:200004629; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3cahvv5help-center-notice-comunity",nocase; classtype:attempted-recon; sid:200004630; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3clopj4",nocase; classtype:attempted-recon; sid:200004631; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3cpqerq",nocase; classtype:attempted-recon; sid:200004632; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3cvl6ir",nocase; classtype:attempted-recon; sid:200004633; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3czqfzo?confirmation",nocase; classtype:attempted-recon; sid:200004634; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3d7ezub?facebook_update",nocase; classtype:attempted-recon; sid:200004635; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3dj0r1p",nocase; classtype:attempted-recon; sid:200004636; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3dky0ds?facebook_update",nocase; classtype:attempted-recon; sid:200004637; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3e3wjwp",nocase; classtype:attempted-recon; sid:200004638; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3eeiwqv",nocase; classtype:attempted-recon; sid:200004639; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3efkwnj",nocase; classtype:attempted-recon; sid:200004640; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ego3xw?redirect=system",nocase; classtype:attempted-recon; sid:200004641; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3eoqvcn",nocase; classtype:attempted-recon; sid:200004642; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3eptccr",nocase; classtype:attempted-recon; sid:200004643; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3fb9f8f",nocase; classtype:attempted-recon; sid:200004644; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3fd8key",nocase; classtype:attempted-recon; sid:200004645; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3fk3blu",nocase; classtype:attempted-recon; sid:200004646; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3fmvby5?facebook_update",nocase; classtype:attempted-recon; sid:200004647; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3fyg9rf",nocase; classtype:attempted-recon; sid:200004648; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3guiinq?confirmation",nocase; classtype:attempted-recon; sid:200004649; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3gxztog",nocase; classtype:attempted-recon; sid:200004650; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3gyfnlm?confirmation",nocase; classtype:attempted-recon; sid:200004651; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3gymrhg",nocase; classtype:attempted-recon; sid:200004652; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3hvucnu",nocase; classtype:attempted-recon; sid:200004653; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3i8tjul",nocase; classtype:attempted-recon; sid:200004654; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3jow35g?confirmation",nocase; classtype:attempted-recon; sid:200004655; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3jqfusj?confirmation",nocase; classtype:attempted-recon; sid:200004656; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3jqmbfu",nocase; classtype:attempted-recon; sid:200004657; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3jvodhm?confirmation",nocase; classtype:attempted-recon; sid:200004658; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3jxszq1?confirmation",nocase; classtype:attempted-recon; sid:200004659; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3k2aaqc?facebook_update",nocase; classtype:attempted-recon; sid:200004660; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3kdifqr",nocase; classtype:attempted-recon; sid:200004661; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3kqhnr0",nocase; classtype:attempted-recon; sid:200004662; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3kueruz",nocase; classtype:attempted-recon; sid:200004663; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3kxfgbu",nocase; classtype:attempted-recon; sid:200004664; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3l4jpqg?facebook_update",nocase; classtype:attempted-recon; sid:200004665; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ldovbh",nocase; classtype:attempted-recon; sid:200004666; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3lgmoqh",nocase; classtype:attempted-recon; sid:200004667; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3mgij5v",nocase; classtype:attempted-recon; sid:200004668; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3mkihc9",nocase; classtype:attempted-recon; sid:200004669; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3mrtcap",nocase; classtype:attempted-recon; sid:200004670; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3mryk6q",nocase; classtype:attempted-recon; sid:200004671; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3mwnmia?confirmation",nocase; classtype:attempted-recon; sid:200004672; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3nddkta",nocase; classtype:attempted-recon; sid:200004673; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3nvr2mn",nocase; classtype:attempted-recon; sid:200004674; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3phrfct",nocase; classtype:attempted-recon; sid:200004675; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3pqid6z?confirmation",nocase; classtype:attempted-recon; sid:200004676; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3qc8jtv",nocase; classtype:attempted-recon; sid:200004677; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3qplrme",nocase; classtype:attempted-recon; sid:200004678; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3r49apq?facebook_update",nocase; classtype:attempted-recon; sid:200004679; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3r8xxmg?facebook_update",nocase; classtype:attempted-recon; sid:200004680; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3rd3dgx",nocase; classtype:attempted-recon; sid:200004681; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3reovvv",nocase; classtype:attempted-recon; sid:200004682; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3rkzqb5",nocase; classtype:attempted-recon; sid:200004683; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3rucafb?confirmations",nocase; classtype:attempted-recon; sid:200004684; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3rvdpnz",nocase; classtype:attempted-recon; sid:200004685; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3s7gmhf",nocase; classtype:attempted-recon; sid:200004686; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3sdxkuf",nocase; classtype:attempted-recon; sid:200004687; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3tks2um",nocase; classtype:attempted-recon; sid:200004688; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3tzc89x",nocase; classtype:attempted-recon; sid:200004689; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3vtbyq5",nocase; classtype:attempted-recon; sid:200004690; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3vyh0x9",nocase; classtype:attempted-recon; sid:200004691; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3w8ru6g?confirmation",nocase; classtype:attempted-recon; sid:200004692; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3wb6m3i",nocase; classtype:attempted-recon; sid:200004693; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3xhfy9m?facebook_update",nocase; classtype:attempted-recon; sid:200004694; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3xkuef1?confirmation",nocase; classtype:attempted-recon; sid:200004695; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3xrdvez?facebook_update",nocase; classtype:attempted-recon; sid:200004696; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3yatzv9?confirmation",nocase; classtype:attempted-recon; sid:200004697; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/bancamps-web",nocase; classtype:attempted-recon; sid:200004698; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/click-confirm",nocase; classtype:attempted-recon; sid:200004699; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/coinspot-claim-bonus",nocase; classtype:attempted-recon; sid:200004700; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/community-details",nocase; classtype:attempted-recon; sid:200004701; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/confirm-click",nocase; classtype:attempted-recon; sid:200004702; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/edoardopolaccoufficiale",nocase; classtype:attempted-recon; sid:200004703; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/i-13orange",nocase; classtype:attempted-recon; sid:200004704; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/i-14orange",nocase; classtype:attempted-recon; sid:200004705; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/id-lockpages",nocase; classtype:attempted-recon; sid:200004706; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/id-locksystem",nocase; classtype:attempted-recon; sid:200004707; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/info-details-notification",nocase; classtype:attempted-recon; sid:200004708; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/ip13-orange",nocase; classtype:attempted-recon; sid:200004709; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/ip14-orange",nocase; classtype:attempted-recon; sid:200004710; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/lrs-gov1",nocase; classtype:attempted-recon; sid:200004711; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/main-pages",nocase; classtype:attempted-recon; sid:200004712; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/mr-pin",nocase; classtype:attempted-recon; sid:200004713; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/orange-id13",nocase; classtype:attempted-recon; sid:200004714; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/orange-id2",nocase; classtype:attempted-recon; sid:200004715; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/orange-id3",nocase; classtype:attempted-recon; sid:200004716; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/orange-id4",nocase; classtype:attempted-recon; sid:200004717; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/page-infromation",nocase; classtype:attempted-recon; sid:200004718; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/pandemicreliefpackage",nocase; classtype:attempted-recon; sid:200004719; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/policy-pages",nocase; classtype:attempted-recon; sid:200004720; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/portale-mps-attivazione",nocase; classtype:attempted-recon; sid:200004721; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/recoveryform",nocase; classtype:attempted-recon; sid:200004722; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/verifikasipemblokiran_id",nocase; classtype:attempted-recon; sid:200004723; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/2p3bbbs",nocase; classtype:attempted-recon; sid:200004724; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3aolo2y",nocase; classtype:attempted-recon; sid:200004725; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3bqoevf",nocase; classtype:attempted-recon; sid:200004726; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3g1epw3",nocase; classtype:attempted-recon; sid:200004727; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3jrtmmu",nocase; classtype:attempted-recon; sid:200004728; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3koilft",nocase; classtype:attempted-recon; sid:200004729; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3xmjxs4",nocase; classtype:attempted-recon; sid:200004730; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/taxirsxcy",nocase; classtype:attempted-recon; sid:200004731; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitwayconnect.com",nocase; http_uri; content:"/en/wallets/",nocase; classtype:attempted-recon; sid:200004732; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blackbearcccouk-my.sharepoint.com",nocase; http_uri; content:"/personal/accounts_blackbearcc_co_uk/_layouts/15/onedrive.aspx?id=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments%2fngb%20urgente%20substanti%c3%able%20update%20%5f%20voorstel%2epdf&\;parent=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments&\;originalpath=ahr0chm6ly9ibgfja2jlyxjjy2nvdwstbxkuc2hhcmvwb2ludc5jb20vomi6l2cvcgvyc29uywwvywnjb3vudhnfymxhy2tizwfyy2nfy29fdwsvrve5as01b19mukjbcutzeunhv3eznw9ccfbtmze3b2fsrnrgnhpzuenbvlfiqt9ydgltzt1tqjzyquroodjvzw",nocase; classtype:attempted-recon; sid:200004733; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bluehorse.in",nocase; http_uri; content:"/sella/info.html",nocase; classtype:attempted-recon; sid:200004734; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bom.so",nocase; http_uri; content:"/mkp9ff",nocase; classtype:attempted-recon; sid:200004735; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bombomsafar.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200004736; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonomequedoencasa.blogspot.com",nocase; http_uri; content:"/?aplicar",nocase; classtype:attempted-recon; sid:200004737; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bpl.kr",nocase; http_uri; content:"/s9x",nocase; classtype:attempted-recon; sid:200004738; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bre.is",nocase; http_uri; content:"/2r9pyocy",nocase; classtype:attempted-recon; sid:200004739; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"breople.com",nocase; http_uri; content:"/wp-includes/certificates/dirc/id/f12b9/code-sms.html",nocase; classtype:attempted-recon; sid:200004740; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"burdettechevrolet.com",nocase; http_uri; content:"/?ml0ielsxk7",nocase; classtype:attempted-recon; sid:200004741; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capac.ru",nocase; http_uri; content:"/cache/secure.business.bt.com/app/",nocase; classtype:attempted-recon; sid:200004742; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdn.shopify.com",nocase; http_uri; content:"/s/files/1/0533/5367/6992/t/3/assets/home.html",nocase; classtype:attempted-recon; sid:200004743; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"centromedicoviladomat.com",nocase; http_uri; content:"/index.php?option=com_content&view=article&id=67",nocase; classtype:attempted-recon; sid:200004744; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-ase-supporthelp.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200004745; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chronopostaws.com",nocase; http_uri; content:"/colis-livraison/bibaztgkmv4379",nocase; classtype:attempted-recon; sid:200004746; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chronopostaws.com",nocase; http_uri; content:"/colis-livraison/bibaztgkmv4429",nocase; classtype:attempted-recon; sid:200004747; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chronopostaws.com",nocase; http_uri; content:"/colis-livraison/bibaztgkmv4685",nocase; classtype:attempted-recon; sid:200004748; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chronopostvalidation.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post_12.html",nocase; classtype:attempted-recon; sid:200004749; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci3.googleusercontent.com",nocase; http_uri; content:"/proxy/rdh-rjsrv9zzrx57iscgov74o1gka4qjdfj01qr7v8-pkjgyvn50tivt7pzqgm5kuqdmonqle3f8eq_t8f4xl6jdozabmf2lxy-888ai8hdji633rg",nocase; classtype:attempted-recon; sid:200004750; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci4.googleusercontent.com",nocase; http_uri; content:"/proxy/djc3ckf7jcnj8l0duyaqyjwffeskzbccy9spjiauj_jwrplgw0ahyaf1xozvm6n_fjn8q1-2vkhqqujjr1en3qej703lyxxujt6tto-ttwsl6hgsggp3ehcc",nocase; classtype:attempted-recon; sid:200004751; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci4.googleusercontent.com",nocase; http_uri; content:"/proxy/zjba9cvtmkfnoveyofx6gqong0kqi3s69d9o2y32fmu_gankb59tj-rb79bolx0bwbsemnonfhh2esy9olfdp-20gybztkzstfhfheqrrjuefxwiwkqws29wxm6tdobikwz-qkzfphpaldfr",nocase; classtype:attempted-recon; sid:200004752; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/yc8bd&post=665308711_37&cc_key",nocase; classtype:attempted-recon; sid:200004753; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/yzuft&post=665308711_32&cc_key",nocase; classtype:attempted-recon; sid:200004754; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"click.message.fruit.com",nocase; http_uri; content:"/?qs=6541641088c869552ced792d84ee93eabf075e23cd5eba83a7d07a40ad9cf2ce36c931984719b9df7de658999defbc87f999ec46970a0280",nocase; classtype:attempted-recon; sid:200004755; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"click.mlsend.com",nocase; http_uri; content:"/link/c/yt0xody1njc2ndu4nze0nzmyote3jmm9cjhomyzlptamyj04nzixntk1njcmzd1knxu4atlw.338xynlsjsomrkq_uuuwijhtdcjjkmhxxokiv23jck0",nocase; classtype:attempted-recon; sid:200004756; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clickmetertracking.com",nocase; http_uri; content:"/8a99",nocase; classtype:attempted-recon; sid:200004757; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-dot-chaser-331005.uk.r.appspot.com",nocase; http_uri; content:"/#moreinfo@widomaker.com",nocase; classtype:attempted-recon; sid:200004758; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/...x",nocase; classtype:attempted-recon; sid:200004759; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/...xxx",nocase; classtype:attempted-recon; sid:200004760; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/.xx./xx",nocase; classtype:attempted-recon; sid:200004761; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/.xx./xx...x.........x/......",nocase; classtype:attempted-recon; sid:200004762; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/.xx./xx...xxx......",nocase; classtype:attempted-recon; sid:200004763; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize",nocase; classtype:attempted-recon; sid:200004764; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; http_uri; content:"/xxxx",nocase; classtype:attempted-recon; sid:200004765; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cobra.yape.cconett.com",nocase; http_uri; content:"/yape/login/inicio",nocase; classtype:attempted-recon; sid:200004766; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codepasta.app",nocase; http_uri; content:"/paste/c4tl1sfout2tbkhn5810/raw",nocase; classtype:attempted-recon; sid:200004767; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"communitychurch-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/infonoreply_communitychurch_tv/eburrky2tklimiiiqf0ia5kbbhkaxaypf06-08wf9wjebq?e=w5jmrb",nocase; classtype:attempted-recon; sid:200004768; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confabint.com",nocase; http_uri; content:"/discounts_services/writing/loginform2d0e.php",nocase; classtype:attempted-recon; sid:200004769; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"createchsoft.com",nocase; http_uri; content:"/wp-includes/js/crop/cm",nocase; classtype:attempted-recon; sid:200004770; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php",nocase; classtype:attempted-recon; sid:200004771; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418",nocase; classtype:attempted-recon; sid:200004772; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418&\;email=jackdavis@eureliosollutions.com&\;fid=1&\;fid=4&\;rand=13inboxlightaspxn.1774256418",nocase; classtype:attempted-recon; sid:200004773; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418",nocase; classtype:attempted-recon; sid:200004774; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;",nocase; classtype:attempted-recon; sid:200004775; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;amp",nocase; classtype:attempted-recon; sid:200004776; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;ampopensource:observable-35835700-0d08-4c25-a188-b8312ba00a941067515",nocase; classtype:attempted-recon; sid:200004777; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;fid.4.1252899642&\;fid=1&\;fav.1&\;rand.13inboxlight.aspxn.1774256418&\;fid.1252899642&\;fid.1&\;fav.1&\;email=&\;.rand=13inboxlight.aspx?n=1774256418&\;fid=4",nocase; classtype:attempted-recon; sid:200004778; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;fid.4.1252899642&\;fid=4&\;fav.1&\;rand.13inboxlight.aspxn.1774256418&\;fid.1252899642&\;fid.1&\;email=jsmith@imaphost.com&\;.rand=13inboxlight.aspx?n=1774256418",nocase; classtype:attempted-recon; sid:200004779; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct?email=jackdavis@eureliosollutions.com",nocase; classtype:attempted-recon; sid:200004780; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativeingredient.com",nocase; http_uri; content:"/wp-includes/images/verify/update/y.html",nocase; classtype:attempted-recon; sid:200004781; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditiperhabbogratissicuro100.blogspot.com",nocase; http_uri; content:"/2011/02/habbo-crediti-gratis-sicuro-100.html",nocase; classtype:attempted-recon; sid:200004782; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cursodemediacioncivilymercantil.com",nocase; http_uri; content:"/wp-admin/bnm/hanmail/login.php?cmd=login_submit&\;id=b4045352d985a89a1086c6655bb7b881b4045352d985a89a1086c6655bb7b881&\;session=b4045352d985a89a1086c6655bb7b881b4045352d985a89a1086c6655bb7b881",nocase; classtype:attempted-recon; sid:200004783; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cursodemediacioncivilymercantil.com",nocase; http_uri; content:"/wp-admin/bnm/hanmail/login.php?cmd=login_submit&\;id=fd6f62fb003d56b7490a74fffe46bf1dfd6f62fb003d56b7490a74fffe46bf1d&\;session=fd6f62fb003d56b7490a74fffe46bf1dfd6f62fb003d56b7490a74fffe46bf1d",nocase; classtype:attempted-recon; sid:200004784; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cusstomerservicee.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200004785; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/2isbc3k",nocase; classtype:attempted-recon; sid:200004786; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/3yqokjg",nocase; classtype:attempted-recon; sid:200004787; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/3yy01ci",nocase; classtype:attempted-recon; sid:200004788; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/4ypfq09",nocase; classtype:attempted-recon; sid:200004789; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/5yhe1qn",nocase; classtype:attempted-recon; sid:200004790; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/7yqfwsn",nocase; classtype:attempted-recon; sid:200004791; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/9iza0rh",nocase; classtype:attempted-recon; sid:200004792; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/aynunsk",nocase; classtype:attempted-recon; sid:200004793; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ayw5mev",nocase; classtype:attempted-recon; sid:200004794; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/bundu4e?id/help/pages?ref=cr",nocase; classtype:attempted-recon; sid:200004795; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/byqp8mx",nocase; classtype:attempted-recon; sid:200004796; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/cir5eqh",nocase; classtype:attempted-recon; sid:200004797; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/claiminc",nocase; classtype:attempted-recon; sid:200004798; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ctmlfil",nocase; classtype:attempted-recon; sid:200004799; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/cyni5cc",nocase; classtype:attempted-recon; sid:200004800; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/cyqucr4",nocase; classtype:attempted-recon; sid:200004801; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/dkvkq49/",nocase; classtype:attempted-recon; sid:200004802; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ftledcr",nocase; classtype:attempted-recon; sid:200004803; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/gizgmqy",nocase; classtype:attempted-recon; sid:200004804; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/gizjbyh",nocase; classtype:attempted-recon; sid:200004805; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/gyqdc7m",nocase; classtype:attempted-recon; sid:200004806; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/hiooa5l",nocase; classtype:attempted-recon; sid:200004807; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ingdirect-es",nocase; classtype:attempted-recon; sid:200004808; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/iyn1owx",nocase; classtype:attempted-recon; sid:200004809; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/kiiataa",nocase; classtype:attempted-recon; sid:200004810; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/mib86li",nocase; classtype:attempted-recon; sid:200004811; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/mynrk6q",nocase; classtype:attempted-recon; sid:200004812; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ny0rjd4",nocase; classtype:attempted-recon; sid:200004813; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/nynglzu",nocase; classtype:attempted-recon; sid:200004814; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/nyxbpmv",nocase; classtype:attempted-recon; sid:200004815; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/oyqykkh",nocase; classtype:attempted-recon; sid:200004816; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ptl7kd8",nocase; classtype:attempted-recon; sid:200004817; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/py2rr2z",nocase; classtype:attempted-recon; sid:200004818; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/pyqptqe",nocase; classtype:attempted-recon; sid:200004819; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/pywuwcj",nocase; classtype:attempted-recon; sid:200004820; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/qyc4svc",nocase; classtype:attempted-recon; sid:200004821; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/qymd2vc",nocase; classtype:attempted-recon; sid:200004822; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/rykpt4j",nocase; classtype:attempted-recon; sid:200004823; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ryzqc5o",nocase; classtype:attempted-recon; sid:200004824; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/tyq6jn2",nocase; classtype:attempted-recon; sid:200004825; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/uybigpf",nocase; classtype:attempted-recon; sid:200004826; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/uydktcc",nocase; classtype:attempted-recon; sid:200004827; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/uyqji5z",nocase; classtype:attempted-recon; sid:200004828; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/uyx0po9",nocase; classtype:attempted-recon; sid:200004829; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/wyc154r",nocase; classtype:attempted-recon; sid:200004830; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/xoit8q6/",nocase; classtype:attempted-recon; sid:200004831; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/xynjuem",nocase; classtype:attempted-recon; sid:200004832; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ytv0uzv",nocase; classtype:attempted-recon; sid:200004833; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/zooujmb/",nocase; classtype:attempted-recon; sid:200004834; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cy.tc",nocase; http_uri; content:"/oglp",nocase; classtype:attempted-recon; sid:200004835; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d854c624d7.gesundheitundschonheit.com",nocase; http_uri; content:"/#?act=cl&pid=34515_md&uid=1&vid=25&ofid=1615&lid=126&cid=17171",nocase; classtype:attempted-recon; sid:200004836; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davidshopeaz.org",nocase; http_uri; content:"/a/rackspace/rackspace.html",nocase; classtype:attempted-recon; sid:200004837; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davidshopeaz.org",nocase; http_uri; content:"/gang/rackspace/rackspace.html",nocase; classtype:attempted-recon; sid:200004838; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davidshopeaz.org",nocase; http_uri; content:"/heal/rackspace/rackspace.html",nocase; classtype:attempted-recon; sid:200004839; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davidshopeaz.org",nocase; http_uri; content:"/mk/rackspace/rackspace.html",nocase; classtype:attempted-recon; sid:200004840; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desty.page",nocase; http_uri; content:"/midasbuyid",nocase; classtype:attempted-recon; sid:200004841; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digisigner.com",nocase; http_uri; content:"/online/showdocument?documentid=1fce937a-ba39-4053-a83a-f07711ad8efd&invitationid=82f3e840-cd11-4da4-8579-304bd7e930b0",nocase; classtype:attempted-recon; sid:200004842; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vszcwxk6nifthkg32wjxfjgq9yc-jjujkbsumqeeau8uw7xkcutyp0tbgux2mvwu8iqfrxxlunajob8/pub",nocase; classtype:attempted-recon; sid:200004843; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vt_xl-m0ff8yqqhzhgseahgwejo0znh9re6w0qvgbe0qfe084hrebjjg673htphdnvbcdnq6agehncq/pub?mobilelogin",nocase; classtype:attempted-recon; sid:200004844; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vth3iya0ov7p49rk9ejozgqnueuk8fna2mky389hertlwx4mnoyhl1mlhnwbz8sxnsqtk8i5uysmq68/pub?embedded=true",nocase; classtype:attempted-recon; sid:200004845; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vts9czxqycsgi-quifs7m1mqjzmlcjlccnhw3dsahdss5ymnpy6y0vsgwvf3piu6js22ydjyew1oyo_/pub?embedded=true",nocase; classtype:attempted-recon; sid:200004846; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/12467akksjbdxtns1aefg-fo9hlxamtxynf5brvbz5tc/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200004847; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1fpyjsolbptidxpf23lqom1jghfw7qrvbbbfxxi82pzg/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200004848; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1is577ofudpsreyewwi2gvb2j0rczb6ebbilj7i_rc9q/",nocase; classtype:attempted-recon; sid:200004849; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1is577ofudpsreyewwi2gvb2j0rczb6ebbilj7i_rc9q/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200004850; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc-xysogohjsbzmcnoded8ooar2gz1c5zxobgk8envh3jbpow/viewform",nocase; classtype:attempted-recon; sid:200004851; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc0yyqlieizg0nzouznvhsjfags1h9qi5hpdw3qlgbivm501q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004852; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc4bagzjzmstbnjhy7zpy5zsx-xrn7reoouolv54luk5tihha/viewform",nocase; classtype:attempted-recon; sid:200004853; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc8uc5aztlek3s6dqtk1etorhez5m2yvubyw5qmfkpisrelcq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200004854; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc_enqwhhv1jnvzy55mb4ghvjd4wcz9plnolh2eoitk7qgbra/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004855; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc_f0pxmnwzrtbck6u06fdzocmhgzvjzlc8cu7c9b456fhccq/viewform",nocase; classtype:attempted-recon; sid:200004856; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscaoiohhbm7suyz9ol9o9ueunbxn6donxrfjge2cevdw_8jmw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004857; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscbtba5srjedev4uvqq49pt3recywqah-ar5szplndj-dxhgw/viewform",nocase; classtype:attempted-recon; sid:200004858; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscc30j0zmjvz0ct-wi59yhnz9gimpj3snofe5vkbovmeykomg/viewform",nocase; classtype:attempted-recon; sid:200004859; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscc98m5fw4ifog0zeiuquxitizmisrgsdvyxvtxsppunpkwzq/viewform",nocase; classtype:attempted-recon; sid:200004860; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscclmqirehqtkm3vl4u9gm2zv6xfvrddbrgke9fmsfujqbboq/viewform",nocase; classtype:attempted-recon; sid:200004861; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscd8t8sjgxqrsa6dq5kjpmrpsxkvi4bl38sfdu7wa3sl32elg/viewform",nocase; classtype:attempted-recon; sid:200004862; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform",nocase; classtype:attempted-recon; sid:200004863; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004864; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform",nocase; classtype:attempted-recon; sid:200004865; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004866; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdkcb2saiqfhtrh2inewegl56-jrv0e_ncfubvdmdprxpzfq/viewform",nocase; classtype:attempted-recon; sid:200004867; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdkcb2saiqfhtrh2inewegl56-jrv0e_ncfubvdmdprxpzfq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004868; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsceoxsfawdsbd2r-jk2sppywnv1bchzjjcw2xkcj7oqkwqriw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004869; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscf9u8nrld-zvu6clr4jcwnw0buqrykdldtzoullbxy8kc1ta/viewform",nocase; classtype:attempted-recon; sid:200004870; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscfh2njwrve6_rkxxy1yz83keoeekd4maqcnd-ivq7rkg0uca/viewform",nocase; classtype:attempted-recon; sid:200004871; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscfmdl3il-2rcplfeq-12jtre1mwsgbnmh2nhoj9xoflmplew/viewform",nocase; classtype:attempted-recon; sid:200004872; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscirilop6_iti0zvvrlsbk8zfaeo-f10otlhj9k5liyervk4g/viewform",nocase; classtype:attempted-recon; sid:200004873; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjtat4fmstlxz3hbfkg4qyi-epfdmun7_avcqwvgscoydytw/viewform",nocase; classtype:attempted-recon; sid:200004874; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjvnhykksssaw-kycyrl6ywg_r3fdjuyqhk2mrmxcpgwfxoa/viewform",nocase; classtype:attempted-recon; sid:200004875; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscmrf9o793rdmj71tzhkwpti-pdxiyaxjd_lwohekbagyldgq/viewform",nocase; classtype:attempted-recon; sid:200004876; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscmzyecgbuuccfs_5e5axn9hpruzskqmvseedm0xz1qrqb5vg/viewform",nocase; classtype:attempted-recon; sid:200004877; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscn6xxq_xvtivggy_4rkibou1i27e0kpiimikafpaavki1vsq/viewform?usp=send_form&usp=embed_facebook",nocase; classtype:attempted-recon; sid:200004878; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscphvypdecdasu-iqnvt4bvkiu5g1fioskjyfi9gk2z69cemq/viewform",nocase; classtype:attempted-recon; sid:200004879; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscqbbsvkpxnasqgeazpzwxp1ln7qzdurt-nqn4azqa7q14euw/viewform",nocase; classtype:attempted-recon; sid:200004880; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscrgopduxv2yg9memppi-dzfii70kq8hr8pi5zn9o_5amr3xa/viewform",nocase; classtype:attempted-recon; sid:200004881; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscrmsgjymaojts0bfneswvnfekiw6zya5rzyqoa1ydp5wkcrw/viewform",nocase; classtype:attempted-recon; sid:200004882; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscuttypbph1iazuis8aa6xvrlmagwglmdcrrg8g2oymskvbva/viewform",nocase; classtype:attempted-recon; sid:200004883; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscuzwqncl3qs7cwfb7jlimpdueycxy0mv6zknp0uubdbkcu3w/viewform",nocase; classtype:attempted-recon; sid:200004884; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscvp9muuu33wgba4h5kugaleeh0onrqzug-b6n5aj5werrmaw/viewform",nocase; classtype:attempted-recon; sid:200004885; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscvqmhqgwbubzxdynzgvlbmmziyagdiadz2eyhc-s-ro8ndfq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004886; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform",nocase; classtype:attempted-recon; sid:200004887; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004888; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscz4uf8dtvwhgxggkzsbbhjcgu9npgc6agxpy5o2fwpo6tv5q/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004889; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsczp3nbsyvoj5-wf-7k4xshjczyxvdc-lc679urtbl_k-9x8q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004890; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd1x00gqusaavdvp5ualsrctsjb80y9oy7yln6wwani40srpw/viewform",nocase; classtype:attempted-recon; sid:200004891; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd1x00gqusaavdvp5ualsrctsjb80y9oy7yln6wwani40srpw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004892; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd3x6brnru3toiionptordwmc4zorxcky1ebpmeg6bb4jfuca/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004893; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd7jgegqudsjg7blscqgfvdftyvlno6xreg6wjuxl0hnfbwtw/viewform?vc=0&\;c=0&\;w=1&\;flr=0&\;gxids=7628",nocase; classtype:attempted-recon; sid:200004894; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd8_xzmknrntxwpeg8bvmvbbzmjsfgejo-vngsmyjx1dnidsg/viewform",nocase; classtype:attempted-recon; sid:200004895; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd8vkw5fxeroe_pxa7n5cdfpukhahbg_7k7sg0iuosh_xsyoa/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004896; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd9poeb_wmgffgg8taw4z_np0kdbo32gr35k1zxizj7lcdela/viewform",nocase; classtype:attempted-recon; sid:200004897; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd_c4wpt0zzouwt5lr9p5kn5cylz3ananv1hlix6u_h36w1rg/viewform",nocase; classtype:attempted-recon; sid:200004898; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsda4flfi-1_gvwqnbb1dcxz_mb5omo9t2oc-vslzfgh6avrag/viewform",nocase; classtype:attempted-recon; sid:200004899; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdbgprbyowwcugqslasnoo-sbqcrgi6ppycsytvsw2_dwfeug/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004900; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform",nocase; classtype:attempted-recon; sid:200004901; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200004902; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdcznggxnwia2ct8kmxid1tdqhgerhnmixukxuj7nmq1lqsma/viewform",nocase; classtype:attempted-recon; sid:200004903; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfarxg-0eurkyimsg-ukgl4mbtgvwfhe1wzbdxmb7oaosnyg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004904; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform",nocase; classtype:attempted-recon; sid:200004905; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004906; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdgxybkn7btnmkuuyyoe0rlbw8kmdgbwejv6l52fjbm9vledg/viewform",nocase; classtype:attempted-recon; sid:200004907; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdinjm_qvdbv3roybqi073rm1pujmrrs7lid7c3qk-4xwweew/viewform",nocase; classtype:attempted-recon; sid:200004908; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdlwgxgjcqz_53lnvyfaiibnkptndldhs4vd0c__6lufv81zq/viewform",nocase; classtype:attempted-recon; sid:200004909; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdmsww4edj2yofwdenmvl3uvyibigishgajtsfa7chvcan0wg/viewform",nocase; classtype:attempted-recon; sid:200004910; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdmsww4edj2yofwdenmvl3uvyibigishgajtsfa7chvcan0wg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004911; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdnngh7an2vfxw1k7cotxcb24wwne2qcm3j5deelwsn676z2q/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200004912; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdpetadtoy4qkid3frxtq_jkthudhyvm17bkmb8iqonismzvw/viewform",nocase; classtype:attempted-recon; sid:200004913; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdvwkczn_rxvn1522z1mcojbs40ymrctyizpyuv72_0wbypgq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004914; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform",nocase; classtype:attempted-recon; sid:200004915; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004916; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxm-rwnv41p3wdcbtetukrctoakvuoe1h_uy8jgnxy7kldza/viewform",nocase; classtype:attempted-recon; sid:200004917; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform",nocase; classtype:attempted-recon; sid:200004918; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdy1071rbhheyidjzo6fw5busqot5eunllw_thawo6udamfaq/viewform",nocase; classtype:attempted-recon; sid:200004919; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdybqflfptobqslhflytic3g936bnojaljztk6ct1d5mjvnnw/viewform",nocase; classtype:attempted-recon; sid:200004920; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdyygc4-s_a1dcdvcf9z9n1yhvz2dnehdr2aij-bcetxe2csg/viewform",nocase; classtype:attempted-recon; sid:200004921; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdzrubbm3nrqdzjs6q7phutjgmn-dm8zquphjg9ge31q7bdhg/viewform",nocase; classtype:attempted-recon; sid:200004922; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse3-zgmg83lctfks0egmambwonybkscrvxix--n1azwngkphg/viewform",nocase; classtype:attempted-recon; sid:200004923; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse5htthgifmniezokiypnjjhanvkvlehsrk9esgcpoauqutiw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004924; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse8ds15kxxdcrhfspcfrbvy6sbdhp0e4540zzmhhvzouewvka/viewform?vc=0&c=0&w=1&flr=0&usp=mail_form_link",nocase; classtype:attempted-recon; sid:200004925; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse_mo9pzgdahzdgz0wctr7lm0cqm_zwos8ljc4cqgtvnqfmfq/viewform",nocase; classtype:attempted-recon; sid:200004926; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseaoj1gseoc72inocx9jofb1nqgqm81_firdsookdvnd4fz3q/viewform",nocase; classtype:attempted-recon; sid:200004927; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseatoai2xktvtr9wsm9mel_ucxouu6ty1_0yyxcrxx0fuv1ow/viewform?pli=1",nocase; classtype:attempted-recon; sid:200004928; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebpakzyvtprhygwe23jlsdieyoca0jtiyy-f68nqwofparww/viewform",nocase; classtype:attempted-recon; sid:200004929; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform",nocase; classtype:attempted-recon; sid:200004930; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004931; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsecilc_5ka58gxqjfrpwbfwmhykkdly-lwm9yubx1l1gwzgpg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004932; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseck8-g3um70ihw-ajfait5whcec3qdowobizswz8_-et_jkq/viewform",nocase; classtype:attempted-recon; sid:200004933; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsed7ckwpjf0hndj7zb3qtjmirtkv6pwcrmhplptuczapfmdew/viewform",nocase; classtype:attempted-recon; sid:200004934; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseerl98zqhhsjdo_vwhfzft3njmrw-es6isa689uqc2opalkg/viewform",nocase; classtype:attempted-recon; sid:200004935; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsefdjhvlb8j4f16k5uewfckrm6sxun7mb8kmt6hnsw4twzb1a/viewform",nocase; classtype:attempted-recon; sid:200004936; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsefv5nkokmsxbkw84jsid2gwxxq8hhcvvajj-hjwl43irewza/viewform?vc=0&\;c=0&\;w=1",nocase; classtype:attempted-recon; sid:200004937; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseggxi9u9oxdijtvvfpdkom7-bau-dstzgnovfyndrhxtk_ew/viewform?fbzx=450838898210045776",nocase; classtype:attempted-recon; sid:200004938; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseht4cdltkad8967jjarcb5nafonbaw3dtpynth9mdk94hf-q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004939; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseirld9oyigwxmec2bc-ax4yd-m-rhezlne00aminsjf0uteq/viewform",nocase; classtype:attempted-recon; sid:200004940; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseja63wnjv6158neslzqwlnlui4yluhb0nlou-vx0ehpwkexg/viewform",nocase; classtype:attempted-recon; sid:200004941; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsejavlqdkikylynqlg6p7kyfu4qnlyy31opnfttucuhgmek4a/viewform",nocase; classtype:attempted-recon; sid:200004942; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsekx9ewwwdcej4qewpnqgzq3bzhqogrop2ui9vxaeswphzyvq/viewform",nocase; classtype:attempted-recon; sid:200004943; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsemwyrvcln1ql8uxd0dsiswveuehikz5hwalfeni7jjfaefmg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004944; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseoz9zpmm0c0fjksklv-p1hsrwsuybmj6bvbd_fkewzzcv_ea/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200004945; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsepe4jevfm3mjc-vndxuq_9wjpc7afrjadkxvp8czawh27cqg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004946; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseq5h3-5stw3bwnpoi6g-gfwcgej7q82incdm01dd1lf182iq/viewform",nocase; classtype:attempted-recon; sid:200004947; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseqdx2wgybdxlhascsuopq1xqsmwrxjf4erl_cpmvtt96dq_g/viewform",nocase; classtype:attempted-recon; sid:200004948; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlser-b6q--nvif2fj7nbn88dh8lj-s2yfbgjyuygwsacbhm6lw/viewform",nocase; classtype:attempted-recon; sid:200004949; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsesuqyiwovf64ujl8ewzqpw-vq7_ljhh96vouros2rqn1vunw/viewform",nocase; classtype:attempted-recon; sid:200004950; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseszgantjzuxgteg0dsiizzmadcwjbjqcsri5nidod2rd2_lg/viewform",nocase; classtype:attempted-recon; sid:200004951; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlset42bzecl3yrdnnffv6f7kecxpd1sy4rbh3h3govwg1k1z1w/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004952; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseumxp-wga1x873upqxmi_hx8nbbllh12zzmxia1xuqp2mgbq/viewform",nocase; classtype:attempted-recon; sid:200004953; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsevpkt1byhl-oqjptw8wbecnm7-iqnax-mz8zd-mxp0fol3jg/viewform",nocase; classtype:attempted-recon; sid:200004954; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform",nocase; classtype:attempted-recon; sid:200004955; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004956; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewymtg0_yxlw9-prz205ldklpt1q0_aklvlput4ndg_coetq/viewform",nocase; classtype:attempted-recon; sid:200004957; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf-exsf9vm0rleksdp46wa2dfca3dhphayf4tl4rktjvmgguw/viewform",nocase; classtype:attempted-recon; sid:200004958; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf32hx6ujsi_gqji38udpamxxxnhyrx8qhmqcqnteinj_0cmg/viewform",nocase; classtype:attempted-recon; sid:200004959; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf9wlt_kxvre3b2hhpi0hcx4zia83c9bbkabo4w15nfekvwuw/viewform",nocase; classtype:attempted-recon; sid:200004960; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform",nocase; classtype:attempted-recon; sid:200004961; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004962; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfanborkr2ivrhpsjdnvnb-jktwkjbuub3wnsxb-md7haddsq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004963; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfbu-bfa-om2nk21gbc1gbbeoy4veybh7qcrj8jw7nwthmh_w/viewform",nocase; classtype:attempted-recon; sid:200004964; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfeoy_w3jwkkz8psgsw4nrja9tmg2lx0x0nvtmv38k0hjzzmq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004965; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfgrkvxsp4vv3h2jpge8n2rwi_acvt3o91y4av8-nbjpc0xxw/viewform?c=0&\;w=1",nocase; classtype:attempted-recon; sid:200004966; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjpx-sxpejnp_q2fmfu0jy8oqoesrx9wbrqplcychw9luupa/viewform",nocase; classtype:attempted-recon; sid:200004967; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform",nocase; classtype:attempted-recon; sid:200004968; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004969; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfk9fn6xlhju27dzlzxp6nzvjlaqbtzb3uf20uakw6ddguvnw/viewform",nocase; classtype:attempted-recon; sid:200004970; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfk9fn6xlhju27dzlzxp6nzvjlaqbtzb3uf20uakw6ddguvnw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004971; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfk9hpkld9-qwaxs8b0cpslaw2-oomu6bcwpxkmp-fo8kr3ew/viewform",nocase; classtype:attempted-recon; sid:200004972; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfksirdejkit-tdeiwrnkf00ygsqdsqth0hmwydiqdik10tna/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004973; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfnjyzbmw-pd1byw4b4opoksx2cealounsnhg5fjc3fk1qocq/viewform",nocase; classtype:attempted-recon; sid:200004974; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfnlsbejsiacubkj2geltmn7slefoweeczuagp3jfmfkijg4a/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004975; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsforgq2zksc0soenei1m7xcow9surjrynoh6ppsku6_kxvdpw/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004976; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform",nocase; classtype:attempted-recon; sid:200004977; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200004978; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfpvmlfha5uwdz_4bnvq19l2mctpltose6aszym6w9ls0hxza/viewform",nocase; classtype:attempted-recon; sid:200004979; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfqpqpbuxrrc0ubvtbrr86nxa4pt68zft0bm_2ufdvt1tzvuw/viewform",nocase; classtype:attempted-recon; sid:200004980; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfrzt6zpkhgtvzqutkypqtjffxaucn3evqpf6ytbqug3t41yw/viewform?usp=pp_urlorganization",nocase; classtype:attempted-recon; sid:200004981; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfsia_g4fb5yg_cu8fjuxcndbgqz1setzfedm0cw0eaonb57g/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004982; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsftriyys-rvphnbmh6v6lyimxjy3rpog8xvtb3v1agqhawiva/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004983; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfuzr1yx2exrzt3ysxszgcawjpp45t9gz3nqtkvhfqslxw_ig/viewform",nocase; classtype:attempted-recon; sid:200004984; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfvhavjlgw4__-x0qdg5tbot5uo9vkn4csn8mx3lpvkdah8ag/viewform",nocase; classtype:attempted-recon; sid:200004985; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfw8tc4otfevjg954r8j4iqemfbche01gm31a5rszwnps6baa/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200004986; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfwdsuczwrih_wnciwh_qjpg1v5p-qk8zyjjoccpbhmyeygrq/viewform",nocase; classtype:attempted-recon; sid:200004987; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfwz5r_cv3xlzu4e1lskks71xp4vhu2i9ypozcion1biih2kg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200004988; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfygwrauuzg0kcnd6w_s42qneyhqpha0zs1rift0akntmlugq/viewform",nocase; classtype:attempted-recon; sid:200004989; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfzhyjvw1nn6bvqhbwmd3rcrm6gukuzir5u9tmsszmcrr8nyw/viewform",nocase; classtype:attempted-recon; sid:200004990; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqf0tdkjp9bzgck8b-ai3grsq3rjr-vcdz-chl0lhkb6geidryfhncvuoraqcy0ehjlygrjqcs8qkki/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200004991; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqf0tdkjp9bzgck8b-ai3grsq3rjr-vcdz-chl0lhkb6geidryfhncvuoraqcy0ehjlygrjqcs8qkki/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200004992; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub?start=false&\;loop=false&\;delayms=3000&\;slide=id.p",nocase; classtype:attempted-recon; sid:200004993; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2.",nocase; classtype:attempted-recon; sid:200004994; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/a9bd4528",nocase; classtype:attempted-recon; sid:200004995; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize",nocase; classtype:attempted-recon; sid:200004996; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize-cli",nocase; classtype:attempted-recon; sid:200004997; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize-client_id-43435a7b9-9a363-49130-a426-35363201d503&\;redirect_uri-www-office-com-response_type",nocase; classtype:attempted-recon; sid:200004998; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize-client_id-43435a7b9-9a363-49130-a426-35363201d503&\;redirect_uri-www-office-com-response_type-code-id_token&\;sco",nocase; classtype:attempted-recon; sid:200004999; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize-client_id-43435a7b9-9a363-49130-a426-35363201d503x",nocase; classtype:attempted-recon; sid:200005000; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/common/oauth2/authorize-client_id-43435a7b9-9a363-49130-a426-35363201d503xx",nocase; classtype:attempted-recon; sid:200005001; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/docsharex",nocase; classtype:attempted-recon; sid:200005002; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/docsharex-authorize.firebaseapp.com/common/oauth2",nocase; classtype:attempted-recon; sid:200005003; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/docsharex-authorize.firebaseapp.com/common/oauth2/",nocase; classtype:attempted-recon; sid:200005004; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/oauth20-authorize-srf-resp",nocase; classtype:attempted-recon; sid:200005005; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/oauth20-authorize-srf-respo",nocase; classtype:attempted-recon; sid:200005006; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/oauth20-authorize-srf-response_type-code-authorize-client_id-43435a7b9-9a363-49130-a426-35363201d503&\;redirect_uri-www-office-com-response_type-code-id_token",nocase; classtype:attempted-recon; sid:200005007; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; http_uri; content:"/x...",nocase; classtype:attempted-recon; sid:200005008; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/19zpw90jgon3j5merxi1pauvkjdmx8nfq/edit",nocase; classtype:attempted-recon; sid:200005009; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1bcdyitw2vo5jp6yrbdmiy8cfrkcf4tby/view?usp=drive_web",nocase; classtype:attempted-recon; sid:200005010; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1c5o9_y8_octsepwyojfarn1k-kj4d9fe",nocase; classtype:attempted-recon; sid:200005011; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1cppgzjnodnftsks_w82um_b_ctgzn-ah/edit",nocase; classtype:attempted-recon; sid:200005012; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1fdgs5g6fqqkudcl2meym63ua3yu0o-tb/view?usp=drive_web",nocase; classtype:attempted-recon; sid:200005013; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1fsvmjkcq7ennrsfdufkcxshfhnda_fui/view",nocase; classtype:attempted-recon; sid:200005014; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1ginbnlpvt7kpfnog9a68fqmn7k3aivui",nocase; classtype:attempted-recon; sid:200005015; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1hdvx7j89h5l7yz39idgzhqji93jnkl_c/view",nocase; classtype:attempted-recon; sid:200005016; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1jixb69t_nw9tmkhvfrejkfzof3d-ijet/view",nocase; classtype:attempted-recon; sid:200005017; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1jvfh6wq9ea9kxr1shhwbh3pecflqzppc/edit",nocase; classtype:attempted-recon; sid:200005018; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1mg5asnyoeet7qsg2n0d_2paxc3j7wx3k/edit",nocase; classtype:attempted-recon; sid:200005019; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1qf58h-1lunq1pubplwdhwd3uooj_vjxa/view",nocase; classtype:attempted-recon; sid:200005020; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1robiosanbh8doqa7yuiewn3akz4094ho/edit",nocase; classtype:attempted-recon; sid:200005021; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"earth01.info",nocase; http_uri; content:"/uae/retailresearch.emirates.claim.gift-cards/almost2.html",nocase; classtype:attempted-recon; sid:200005022; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"earth01.info",nocase; http_uri; content:"/uae/retailresearch.emirates.claim.gift-cards/s4.html",nocase; classtype:attempted-recon; sid:200005023; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"earth01.info",nocase; http_uri; content:"/uae/retailresearch.emirates.claim.gift-cards/s5.html",nocase; classtype:attempted-recon; sid:200005024; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"earth01.info",nocase; http_uri; content:"/uae/retailresearch.emirates.claim.gift-cards/s6.html",nocase; classtype:attempted-recon; sid:200005025; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"earth01.info",nocase; http_uri; content:"/uae/retailresearch.emirates.claim.gift-cards/s7.html",nocase; classtype:attempted-recon; sid:200005026; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"earth01.info",nocase; http_uri; content:"/uae/retailresearch.emirates.claim.gift-cards/subscribe.html",nocase; classtype:attempted-recon; sid:200005027; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edje.com",nocase; http_uri; content:"/cmspagephotos/80-dj774h8dfy/valid",nocase; classtype:attempted-recon; sid:200005028; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eeverywhere-my.sharepoint.com",nocase; http_uri; content:"/personal/marco_eeverywhere_com/_layouts/15/onedrive.aspx?id=/personal/marco_eeverywhere_com/documents/documents&\;originalpath=ahr0chm6ly9lzxzlcnl3agvyzs1tes5zagfyzxbvaw50lmnvbs86zjovcc9tyxjjby9fcwhvbeq1x3hltknorzbdmdvvmgjvvujoy1z3b25futjvejhtlwxqrg9svwvrp3j0aw1lpvduaunytfu4mlvn",nocase; classtype:attempted-recon; sid:200005029; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eleoelswka.blogspot.com",nocase; http_uri; content:"/?m=\;0",nocase; classtype:attempted-recon; sid:200005030; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailwebaccess.co.uk",nocase; http_uri; content:"/bbva/592cf4/425bdbd3-91cf-4e9f-9498-7a06b3ad75ec",nocase; classtype:attempted-recon; sid:200005031; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=t6t%2fhn1dkbyhlyx%2beimbazufa43rrgz6%2faaaewnocdi%3d&docid=1_18168db23429e45f29fdf2e7be120efc4&wdformid=%7bb9970f62%2d44c3%2d4d09%2d9929%2d6e1eb652da57%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200005032; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%20sjfgzhadhvte2gyowjf83iqbjrjehik4s=&\;docid=1_135f7008dfbfa44e6b09dab0eb165b997&\;wdformid={e037f2d9-5daa-4916-ba03-eb11d0aa6dea}&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200005033; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%2bsjfgzhadhvte2gyowjf83iqbjrjehik4s%3d&docid=1_135f7008dfbfa44e6b09dab0eb165b997&wdformid=%7be037f2d9%2d5daa%2d4916%2dba03%2deb11d0aa6dea%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200005034; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esa.www.wamodshost.com",nocase; http_uri; content:"/v1/app/gbwa/image/transformer/4573be1d04074ebfab8fbb16f21a65de",nocase; classtype:attempted-recon; sid:200005035; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eu.questionpro.com",nocase; http_uri; content:"/a/takesurvey?tt=/p9xlsw/pwa97qdwq8ubbg%3d%3d",nocase; classtype:attempted-recon; sid:200005036; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eu.questionpro.com",nocase; http_uri; content:"/t/ab3uufjzb3vk20",nocase; classtype:attempted-recon; sid:200005037; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eurobankovnikredit.com",nocase; http_uri; content:"/?fbclid=iwar3cu_8pblosqw-rwa7evcrs5jpl6zvzkou0qrf7vl9oqge4h2ctmcxrdyk",nocase; classtype:attempted-recon; sid:200005038; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s339/client/snv?noteguid=f48e12fd-48da-e57f-8e76-cdf6e4054e1d&\;notekey=02a9fa6bd051dc6b4581ee3b617b3f88&\;sn=https://www.evernote.com/shard/s339/sh/f48e12fd-48da-e57f-8e76-cdf6e4054e1d/02a9fa6bd051dc6b4581ee3b617b3f88&\;title=optus%20webmail",nocase; classtype:attempted-recon; sid:200005039; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s446/client/snv?noteguid=4dc119ab-57d6-b8e0-4fcb-c11c0a637b94¬ekey=9ddb3753cb700b0c86a78176be71f4f5&sn=https%3a%2f%2fwww.evernote.com%2fshard%2fs446%2fsh%2f4dc119ab-57d6-b8e0-4fcb-c11c0a637b94%2f9ddb3753cb700b0c86a78176be71f4f5&title=you%2bhave%2breceived%2ban%2binvoice.",nocase; classtype:attempted-recon; sid:200005040; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s446/sh/4dc119ab-57d6-b8e0-4fcb-c11c0a637b94/9ddb3753cb700b0c86a78176be71f4f5",nocase; classtype:attempted-recon; sid:200005041; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"everythingmobilelimited-my.sharepoint.com",nocase; http_uri; content:"/personal/jameswaterston_everythingmobilelimited_onmicrosoft_com/_layouts/15/onedrive.aspx",nocase; classtype:attempted-recon; sid:200005042; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelelectrical0-my.sharepoint.com",nocase; http_uri; content:"/personal/tim_hansen_excelelectrical_com/_layouts/15/onedrive.aspx?id=/personal/tim_hansen_excelelectrical_com/documents/open%20to%20view%20shared%20document%20in%20hitech%20sharepoint&\;originalpath=ahr0chm6ly9legnlbgvszwn0cmljywwwlw15lnnoyxjlcg9pbnquy29tlzpmoi9nl3blcnnvbmfsl3rpbv9oyw5zzw5fzxhjzwxlbgvjdhjpy2fsx2nvbs9fa2zoazdydndfaettvl9pwulkctdzmejlveeyr3awzwjnsdfkrgdjrfdfttznp3j0aw1lpunrvevzrwxcmlvn",nocase; classtype:attempted-recon; sid:200005043; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exch.quantserve.com",nocase; http_uri; content:"/r?us_privacy=&\;a=p-w_ayumw3pzr2w&\;labels=_qc.clk,_click.adserver.rtb,_click.rand.60541&\;rtbip=192.184.70.137&\;rtbdata2=eaaaiencvf9odwdnzxrzx1e0mjfftwfuywdlzf9tzxj2awnlimofncj-jtiws_b-ohnodhrwczovl3d3dy5syxcuy29twihbt0llsefpmvdcvwi0vmdxvi1julfbztjdullinvfzuuitwjdutjfpdu3bfukaayfd3aqeoaebqahv4fyeugeawahq-aniadv5u4til9obfllxavhtz0fpaghnqs1sufktuvntqkhlaarzydroawsyaviznracclocbmc4ronaagliagdqas7hhvv4n_fmqqhgagdoagd4agckaxywlnb1yi0xmjyxotkyndq0odazodc1mamaqamasgmejmh7angd_dgd4gmpcc13x0fzdu13m1baujj36gmfcngfefryawu5mjeymfgdaiaeayoedxf1yw50y2fzdc1xyzhybajvuw&\;redirecturl3=https://www.cbtnuggets.com/?utm_source=quantcast&\;utm_medium=prospecting&\;utm_campaign=general_us&\;utm_term=testimonial&\;qc_campaign=cbt_nuggets_q421_managed_service&\;qc_adid=2078771",nocase; classtype:attempted-recon; sid:200005044; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exchange4free.com",nocase; http_uri; content:"/remote/mandate/4jya9anuerrpmikrph7-j5pl9nyz_uw1bc7q1vvmmhw",nocase; classtype:attempted-recon; sid:200005045; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"explorebathurst.com.au",nocase; http_uri; content:"/rrefeeieoj.html?erectrcsq@*cthiytvcdx$zsxycuikjmkjivee$terdtygjyvtrre",nocase; classtype:attempted-recon; sid:200005046; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"expry.it",nocase; http_uri; content:"/ali/fire/fire",nocase; classtype:attempted-recon; sid:200005047; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"expry.it",nocase; http_uri; content:"/vv/fire",nocase; classtype:attempted-recon; sid:200005048; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feeds.feedburner.com",nocase; http_uri; content:"/investorway",nocase; classtype:attempted-recon; sid:200005049; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ferferfccezs.blogspot.com",nocase; http_uri; content:"//?m=0",nocase; classtype:attempted-recon; sid:200005050; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ferferfrefe.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005051; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fifisalha.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005052; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fifit.co.uk",nocase; http_uri; content:"/jelxwqrcrvhj&\;ijosing&\;kontakt@wmb-walther.de.html",nocase; classtype:attempted-recon; sid:200005053; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/biyugbhiuhgy7o900-h9oh98h9-987.appspot.com/o/vnmbvuyt8-8y98yh0%3d890y8iuh9yyh%2f5rtyfghtfyu67-9876trfc%3d9ygv.htm?alt=media&\;token=dce6f041-19ff-4e8a-8012-1cfdac4cf369#bv@pplsi.com",nocase; classtype:attempted-recon; sid:200005054; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&\;prox=p2000isolation@aaa.kr",nocase; classtype:attempted-recon; sid:200005055; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&\;prox=yourname@yourcompany.com",nocase; classtype:attempted-recon; sid:200005056; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/goo2-ac630.appspot.com/o/goo%20(2).html?alt=media&\;token=2d1281a2-3364-420f-a3b5-c693b7bda1f2#a@b.com",nocase; classtype:attempted-recon; sid:200005057; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/goodlez-0976yt.appspot.com/o/index.html?alt=media&token=6d4b3bea-df0a-44f4-9cd4-15bb8aad5b5b#user@example.org",nocase; classtype:attempted-recon; sid:200005058; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/macryti-109.appspot.com/o/kp-oe0%2fbtt-hash.html?alt=media&\;token=02abe8bd-5141-4b5a-a7d4-08120e5f43dd#choiteng@motenghaiplc.com",nocase; classtype:attempted-recon; sid:200005059; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/ntachi-e1dbe.appspot.com/o/hgigieiciejceinhviejrie95489349%20(19).html?alt=media&\;token=5901e369-e71e-416b-9688-b21c62e31587",nocase; classtype:attempted-recon; sid:200005060; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/ntachi-e1dbe.appspot.com/o/hgigieiciejceinhviejrie95489349%20(19).html?alt=media&\;token=5901e369-e71e-416b-9688-b21c62e31587#m.couvee@colasit.nl",nocase; classtype:attempted-recon; sid:200005061; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/odrv-3c4a4.appspot.com/o/index1.html?alt=media&\;token=11958c2a-34a6-4ed1-a1b5-081ec066cb95&\;data=zxzhbi5ncmvzagftqg1py2hlbglulmnvbq==",nocase; classtype:attempted-recon; sid:200005062; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&\;token=216401d2-aba7-42f4-8fd5-9b672cade830#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200005063; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&\;token=216401d2-aba7-42f4-8fd5-9b672cade830#tiekimas@tidlo.lt",nocase; classtype:attempted-recon; sid:200005064; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rei-rezuio-rexire-565.appspot.com/o/%40%40%40indexv-vb-vau-ry-8%252fbv-yu-er-8f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%20-%20copy.html?alt=media&\;token=da92acdd-870d-4049-b9ac-f0d373777f06#info@legalshield.com",nocase; classtype:attempted-recon; sid:200005065; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rei-rezuio-rexire-565.appspot.com/o/%40%40%40indexv-vb-vau-ry-8%252fbv-yu-er-8f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%20-%20copy.html?alt=media&\;token=da92acdd-870d-4049-b9ac-f0d373777f06#support@legalshieldcorp.com",nocase; classtype:attempted-recon; sid:200005066; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rned-a824v.appspot.com/o/gen%252findex2oli.html?alt=media&\;token=828c2259-c86f-442e-91a0-8d43a1fe7d8b#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200005067; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/tei-neriou-reuix-678.appspot.com/o/%40%40%40indexv-vb-veu-ry-8%25433%2569.html?alt=media&\;token=6b0a9c43-8711-491b-9f40-50ad280ffb32#ggradnigo@prepaidlegal.com",nocase; classtype:attempted-recon; sid:200005068; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/updatezz-1308f.appspot.com/o/index.html?alt=media&token=da1bbbe0-5bdb-4187-92a8-00dafe69106c#example@example.com",nocase; classtype:attempted-recon; sid:200005069; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/xenephobia-70ae6.appspot.com/o/s2cure@.htm?alt=media&\;token=d01730c7-5d39-40f0-86ad-632702d9b65e",nocase; classtype:attempted-recon; sid:200005070; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flavena.co.rs",nocase; http_uri; content:"/mc.html",nocase; classtype:attempted-recon; sid:200005071; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flipsnack.com",nocase; http_uri; content:"/cbeac8bbdc9/new-flipbook/full-view.html",nocase; classtype:attempted-recon; sid:200005072; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/btinternetwebmail",nocase; classtype:attempted-recon; sid:200005073; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/pbznezc1j?fc=0",nocase; classtype:attempted-recon; sid:200005074; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/btinternetwebmail",nocase; classtype:attempted-recon; sid:200005075; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/bttelecommunicaation",nocase; classtype:attempted-recon; sid:200005076; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/1mqqu8exzgpptqpl8",nocase; classtype:attempted-recon; sid:200005077; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/3cyoxmwxqkbfpt2v5",nocase; classtype:attempted-recon; sid:200005078; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/8epxhwdapiab7mfw7",nocase; classtype:attempted-recon; sid:200005079; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/9bwawhpz5vi7ilpe6",nocase; classtype:attempted-recon; sid:200005080; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/akohiguxjs9wlpu28?sllqm",nocase; classtype:attempted-recon; sid:200005081; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/b7lqaal42juffiw1a",nocase; classtype:attempted-recon; sid:200005082; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/bfz2l7i3wvrp5heb9",nocase; classtype:attempted-recon; sid:200005083; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/dncj4btc56n1n71n8",nocase; classtype:attempted-recon; sid:200005084; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/eozlrnnf7jh84xdp8",nocase; classtype:attempted-recon; sid:200005085; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/fzlons3fgnjdqdd19?omgbfzrazhlppbtx",nocase; classtype:attempted-recon; sid:200005086; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/goerpntl5tfeumdz6",nocase; classtype:attempted-recon; sid:200005087; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/gr4b9sxradtcj7or7",nocase; classtype:attempted-recon; sid:200005088; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/guptjarp2xatzbvo8",nocase; classtype:attempted-recon; sid:200005089; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/iai7pzm4pxyb145i9",nocase; classtype:attempted-recon; sid:200005090; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/jnkkauxwwbfhtuqz9?hkgotygikyoujp",nocase; classtype:attempted-recon; sid:200005091; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/jzxtb9auexgjcewfa",nocase; classtype:attempted-recon; sid:200005092; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/kehch96avaku7oey7?akowgmooutpwa",nocase; classtype:attempted-recon; sid:200005093; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/nvljeb1quzaovd8u5",nocase; classtype:attempted-recon; sid:200005094; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/puadbxscibgw5ma79?xfccuwmmhgwrwztd",nocase; classtype:attempted-recon; sid:200005095; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/qhwastfqxg1yehi77",nocase; classtype:attempted-recon; sid:200005096; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/qzopkn9aj2gzaw2g6",nocase; classtype:attempted-recon; sid:200005097; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/ruaxzqjjzghi8rar9",nocase; classtype:attempted-recon; sid:200005098; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/rwpcmhm8vtfa7f4m8",nocase; classtype:attempted-recon; sid:200005099; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/sj21ehdebhkcpvfv6",nocase; classtype:attempted-recon; sid:200005100; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/smufgmyhduckbq6ka?fjxhgyroek",nocase; classtype:attempted-recon; sid:200005101; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/uqzzznxv4cfhu3yr9",nocase; classtype:attempted-recon; sid:200005102; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/v5xtnywt5s6zvpp27",nocase; classtype:attempted-recon; sid:200005103; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/v7k2chwbcca59vz27",nocase; classtype:attempted-recon; sid:200005104; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/w6uh9p66tdq6l1m66",nocase; classtype:attempted-recon; sid:200005105; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/x3aasffazsrl8pcr9",nocase; classtype:attempted-recon; sid:200005106; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/x8hybjggubfftabw8",nocase; classtype:attempted-recon; sid:200005107; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/xxccjhuzjtg4pr3y8",nocase; classtype:attempted-recon; sid:200005108; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/xxjqmu6luzkpnalg6",nocase; classtype:attempted-recon; sid:200005109; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/yfxkceytox2zuyvb6",nocase; classtype:attempted-recon; sid:200005110; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=60hhzfbtoe-qdzpnyrluyo-ivxb0mexgqufvg5tcyifunzg5uknzne1irjzvt1y3slewrepwnflmvs4u",nocase; classtype:attempted-recon; sid:200005111; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__tdasqlurfrqmjzxneyxn0g3vexutfvzq0mztu9fms4u",nocase; classtype:attempted-recon; sid:200005112; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__thg5xvuodnbwtvytzhwwdnctknvovo4tldctexmvi4u",nocase; classtype:attempted-recon; sid:200005113; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=jrbxvx3x9keewcq72hm6fnkqekonandcsjd9av060h5urepumvvgmks2te41rfewmlletulvufnuqy4u",nocase; classtype:attempted-recon; sid:200005114; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fra1.digitaloceanspaces.com",nocase; http_uri; content:"/gmaingt/server.html",nocase; classtype:attempted-recon; sid:200005115; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"framer.com",nocase; http_uri; content:"/share/kybxcr6zaz6fe14fggnt/m8srsyezz#m8srsyezz",nocase; classtype:attempted-recon; sid:200005116; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frdezeredaresafin.blogspot.com",nocase; http_uri; content:"/?m=\;0",nocase; classtype:attempted-recon; sid:200005117; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fredsamasont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005118; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geotilla.sites.google.com",nocase; http_uri; content:"/view/b32353/1",nocase; classtype:attempted-recon; sid:200005119; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getrfdeza.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005120; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gg.gg",nocase; http_uri; content:"/scotlabank",nocase; classtype:attempted-recon; sid:200005121; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globalinfohost.com",nocase; http_uri; content:"/landingpages/dd263864-38a2-466a-be2f-4e5ec6c5e042/r5srok8tk_y713klnlxbt_zklga_krexpvvvqclzfvu",nocase; classtype:attempted-recon; sid:200005122; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01fez46yyrvh6f0bbehn8h419h&\;persistence=1&\;checksum=069f46345ac935567ad562a3d64a332066064c97f8feae803d555f9cc820c561",nocase; classtype:attempted-recon; sid:200005123; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01fezncfbjbj86yneatjn0qvt4&\;persistence=1&\;checksum=8142350e161acc6cb246be1d05d596973a1d3ac50af1f3594ee9ea462c87a4ef",nocase; classtype:attempted-recon; sid:200005124; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01ff06m6n2q43m6zcaqrh8xpm2&\;persistence=1&\;checksum=26e140f8abae23dd0c8dd547390a4deb9fc54b1acf3539d8aa44fb19e04902ef",nocase; classtype:attempted-recon; sid:200005125; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01ff0qxy635yfpkrdaxav47j5k&\;persistence=1&\;checksum=cb2e0f7328d6ffea0e15a24046095a0bb98d27d4488e822bea4b181763f2eb0b",nocase; classtype:attempted-recon; sid:200005126; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?mo=78986685794&q=https://c1r.at/h49xmdcp&zp=5095739289&kf=59242331&sa=d&usg=afqjcnf_3jyqkupfmf1gle_0jmhtak3s0w",nocase; classtype:attempted-recon; sid:200005127; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fbit.do%2ffr6ci&sa=d&sntz=1&usg=afqjcne7joz-iz-adrzkrxcihj8t9fs9qw",nocase; classtype:attempted-recon; sid:200005128; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fbit.do%2ffsgjq&\;sa=d&\;sntz=1&\;usg=afqjcngvqc30z-4hiaizv03gpwblwu3vnw",nocase; classtype:attempted-recon; sid:200005129; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://393512dfd8544c98be9a40f2f67df8bd.svc.dynamics.com/t/r/a7uua5shyiplufx4zj7f6u2clgtguiagoxngfoio4am?clientid%3d70000%23%5bemail%5d%2b00-70000&\;source=gmail&\;ust=1636719774661000&\;usg=aovvaw2fsk8htfwhsfqapvbu674n",nocase; classtype:attempted-recon; sid:200005130; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://c1r.at/fzleuule&ry=9080899&sa=d&ha=9992286639&usg=afqjcngde0oxaxjtp-semb24qndyxqpfeg&jj=95316071",nocase; classtype:attempted-recon; sid:200005131; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://c1r.at/n62bfdcp&od=3896761062&sa=d&usg=afqjcnhmj6a5ejlmnfnws314axi9thcopa&qw=69345649672&rh=90290680",nocase; classtype:attempted-recon; sid:200005132; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://passionfruit4576261.brizy.site/&\;source=gmail&\;ust=1608664764243000&\;usg=afqjcnghljnr1tyn8j4c1ijid09ra9ehdq",nocase; classtype:attempted-recon; sid:200005133; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahukewi43cg9sq_1ahx0jeykhfkqbe8qfnoecauqaq&url=%68%74%74%70%73%3a%2f%2f%77%77%77%2e%73%65%6e%63%72%65%61%74%69%76%65%73%2e%63%6f%6d%2f%6e%65%2d%79%61%70%69%79%6f%72%75%7a%2f&usg=aovvaw0g6pk8tcfluhm7qoeendyl",nocase; classtype:attempted-recon; sid:200005134; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/fp?u=https://tinyurl.com/32xz989f&grqid=zbk35vud&s=1&hl=id-id",nocase; classtype:attempted-recon; sid:200005135; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=a894ec7f.46t33454t4.pages.dev?user=masoli@legalshieldassociate.com",nocase; classtype:attempted-recon; sid:200005136; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=b4e921f0.sso-mailsrvr-4344e5teed.pages.dev?user=abuse@gmail.com",nocase; classtype:attempted-recon; sid:200005137; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gormanusa-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/tspencer_gormanusa_com/_layouts/15/wopiframe.aspx?guestaccesstoken=wgfwcmmssvdsofa7ljviwaj85tleclug2xbvoqwlmp0%3d&\;docid=1_12424441d8c29412bb868684e5cb74e47&\;wdformid=%7b992e319a%2dbe72%2d460b%2db6b4%2d2d3fcf789fc5%7d&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200005138; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gradcracker.com",nocase; http_uri; content:"/out/408?jobid=29207&u=princed.de?id=8400239909",nocase; classtype:attempted-recon; sid:200005139; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/1kzic",nocase; classtype:attempted-recon; sid:200005140; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/4ds15",nocase; classtype:attempted-recon; sid:200005141; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/6qnhc",nocase; classtype:attempted-recon; sid:200005142; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/dghpp",nocase; classtype:attempted-recon; sid:200005143; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/f1itl",nocase; classtype:attempted-recon; sid:200005144; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/fmjiu",nocase; classtype:attempted-recon; sid:200005145; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/g9yl5",nocase; classtype:attempted-recon; sid:200005146; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/i51rh",nocase; classtype:attempted-recon; sid:200005147; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/lmiyt",nocase; classtype:attempted-recon; sid:200005148; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/m8ikv",nocase; classtype:attempted-recon; sid:200005149; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/o0ugq",nocase; classtype:attempted-recon; sid:200005150; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/rhrme",nocase; classtype:attempted-recon; sid:200005151; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/ta0lq",nocase; classtype:attempted-recon; sid:200005152; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/ue2ho",nocase; classtype:attempted-recon; sid:200005153; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/urq2m",nocase; classtype:attempted-recon; sid:200005154; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/vfywl",nocase; classtype:attempted-recon; sid:200005155; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/w27iz",nocase; classtype:attempted-recon; sid:200005156; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/xegru",nocase; classtype:attempted-recon; sid:200005157; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/zlbow",nocase; classtype:attempted-recon; sid:200005158; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hangovertest1.blogspot.com",nocase; http_uri; content:"/2021/12/window.html",nocase; classtype:attempted-recon; sid:200005159; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heaterintwintersz.ams3.digitaloceanspaces.com",nocase; http_uri; content:"/yuhgbfvdfvbtytrvdfbgt.html",nocase; classtype:attempted-recon; sid:200005160; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiedhustle.com",nocase; http_uri; content:"/cm/",nocase; classtype:attempted-recon; sid:200005161; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homeentertainmentexpo.com",nocase; http_uri; content:"/zeland.html",nocase; classtype:attempted-recon; sid:200005162; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"house18.info",nocase; http_uri; content:"/themes/engines/ira.xml",nocase; classtype:attempted-recon; sid:200005163; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpnepgnmwrgdrrsdshzrvyirlx.gl44393333333.rj.r.appspot.com",nocase; http_uri; content:"/favicon.ico/",nocase; classtype:attempted-recon; sid:200005164; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://dplux.com.ng/cgi-bin/",nocase; classtype:attempted-recon; sid:200005165; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://trimurl.co/0wsx7z",nocase; classtype:attempted-recon; sid:200005166; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www.rkat2.2r-p.xyz/",nocase; classtype:attempted-recon; sid:200005167; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://ykm.de/f4b990c239777330",nocase; classtype:attempted-recon; sid:200005168; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li?https:",nocase; http_uri; content:"//ykm.de/f4b990c239777330",nocase; classtype:attempted-recon; sid:200005169; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ht.ly",nocase; http_uri; content:"/hgav30ruohf",nocase; classtype:attempted-recon; sid:200005170; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ht.ly",nocase; http_uri; content:"/shoh30rwmdj?10/13/2021",nocase; classtype:attempted-recon; sid:200005171; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-m.mx",nocase; http_uri; content:"/ebuse/servic",nocase; classtype:attempted-recon; sid:200005172; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-m.mx",nocase; http_uri; content:"/webaccountupdate/stockholmsuniversitet/",nocase; classtype:attempted-recon; sid:200005173; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifyufyujk.quip.com",nocase; http_uri; content:"/mdkea5ckpozm/click-here-to-start",nocase; classtype:attempted-recon; sid:200005174; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iloveyourglasses.com",nocase; http_uri; content:"/favicon/fr/client/dossier/id78892676363fr398383/authsaml/webintra/paiement/service/8983e78ed6b84875b0fb9e6931e42648/index.html",nocase; classtype:attempted-recon; sid:200005175; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/4t6u/bt",nocase; classtype:attempted-recon; sid:200005176; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/4t6u/e",nocase; classtype:attempted-recon; sid:200005177; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/fgjjm/1-xp",nocase; classtype:attempted-recon; sid:200005178; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/iuhj/kay",nocase; classtype:attempted-recon; sid:200005179; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/kennymoore12/btinternet",nocase; classtype:attempted-recon; sid:200005180; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/kfouo/btcommmms",nocase; classtype:attempted-recon; sid:200005181; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/msw0rd/att_word",nocase; classtype:attempted-recon; sid:200005182; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-31138d48-omsttuer",nocase; classtype:attempted-recon; sid:200005183; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-c6c02c75-omsttuer",nocase; classtype:attempted-recon; sid:200005184; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8",nocase; classtype:attempted-recon; sid:200005185; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imcreator.com",nocase; http_uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8",nocase; classtype:attempted-recon; sid:200005186; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"improvproject.com",nocase; http_uri; content:"/appmanager/renouvellement-automatique-obligatoire/ovh/managerweb-ovhdepartmenttechniqueovh/web.index.html5400configuration_hosting_database/web-ovh/vh/?user-agent=mozilla/5.0+(windows+nt+10.0\;+win64\;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/86.0.4240.75+safari/537.36",nocase; classtype:attempted-recon; sid:200005187; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/emailupdatee/owaweb",nocase; classtype:attempted-recon; sid:200005188; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/outlookwebaccessupgrade/outlookwebaccessupgrade",nocase; classtype:attempted-recon; sid:200005189; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/webmaiil/accounttportal",nocase; classtype:attempted-recon; sid:200005190; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"insurance2019.moneynet.com.tw",nocase; http_uri; content:"/wp-admin/maint/?hash=a2fyaw5hywxtzwlkyxjpymvpcm9aag90bwfpbc5jb20=",nocase; classtype:attempted-recon; sid:200005191; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/dqfm",nocase; classtype:attempted-recon; sid:200005192; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmuqncebndpye9ua8pqfuckv26w9tc72syceep4mdiwagv#user@example.org",nocase; classtype:attempted-recon; sid:200005193; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"j.mp",nocase; http_uri; content:"/3arx6oo",nocase; classtype:attempted-recon; sid:200005194; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"j.mp",nocase; http_uri; content:"/3gydg8x?/supporrecovery",nocase; classtype:attempted-recon; sid:200005195; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"j.mp",nocase; http_uri; content:"/3kkkf0n",nocase; classtype:attempted-recon; sid:200005196; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jtbtigers.com",nocase; http_uri; content:"/65g2g",nocase; classtype:attempted-recon; sid:200005197; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jtbtigers.com",nocase; http_uri; content:"/74237",nocase; classtype:attempted-recon; sid:200005198; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jwjccgswaszsbiao-dot-a-i0n0s-svpport.wl.r.appspot.com",nocase; http_uri; content:"/#gmx@gmxnet.de",nocase; classtype:attempted-recon; sid:200005199; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k12inc-my.sharepoint.com",nocase; http_uri; content:"/personal/jdonahue_k12_com/_layouts/15/wopiframe.aspx?guestaccesstoken=jxndynkzmynao0nofzmhz4t%2fk%2br%2fg7qir2agrjo42ha%3d&docid=1_12252b23331654ef4bf8ef978a8eb83ee&wdformid=%7b2711d93c%2d7591%2d4baa%2db377%2dcf40ba8c7343%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200005200; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kakasoufatre.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005201; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/l3leph",nocase; classtype:attempted-recon; sid:200005202; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://bit.ly/3iqyuex?trackingid=5xoeusik&signature=newsletter",nocase; classtype:attempted-recon; sid:200005203; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://is.gd/f0iqhg?trackingid=48bkxt3p&signature=newsletter",nocase; classtype:attempted-recon; sid:200005204; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://is.gd/f0iqhg?trackingid=6dbwnjes&signature=newsletter",nocase; classtype:attempted-recon; sid:200005205; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://is.gd/f0iqhg?trackingid=jobyxhwn&signature=newsletter",nocase; classtype:attempted-recon; sid:200005206; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://is.gd/f0iqhg?trackingid=vfxhwqah&signature=newsletter",nocase; classtype:attempted-recon; sid:200005207; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://is.gd/js9r3k?trackingid=gaptmj83&signature=newsletter",nocase; classtype:attempted-recon; sid:200005208; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://qrco.de/bcintf?trackingid=c1d85nau&signature=newsletter",nocase; classtype:attempted-recon; sid:200005209; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://submit.irs.mnageaccnt-id-765535234.info/?claim",nocase; classtype:attempted-recon; sid:200005210; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://xcvdsd.page.link/zi7x?trackingid=cvhzehjl&signature=newsletter",nocase; classtype:attempted-recon; sid:200005211; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://xcvdsd.page.link/zi7x?trackingid=dab19g3q&signature=newsletter",nocase; classtype:attempted-recon; sid:200005212; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://xcvdsd.page.link/zi7x?trackingid=nwb0pxlg&signature=newsletter",nocase; classtype:attempted-recon; sid:200005213; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://xcvdsd.page.link/zi7x?trackingid=wqdypvka&signature=newsletter",nocase; classtype:attempted-recon; sid:200005214; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledjgc.com",nocase; http_uri; content:"/function/uploadfile/20220121/20220121014320_33527.html",nocase; classtype:attempted-recon; sid:200005215; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledjgc.com",nocase; http_uri; content:"/function/uploadfile/20220121/20220121014320_33527.html#user@domain.tld",nocase; classtype:attempted-recon; sid:200005216; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lifeiswhatyoumakeofit.com",nocase; http_uri; content:"/match_login/match.com/match/login1876.html",nocase; classtype:attempted-recon; sid:200005217; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lihi1.cc",nocase; http_uri; content:"/fqg9x",nocase; classtype:attempted-recon; sid:200005218; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkedin.com",nocase; http_uri; content:"/slink?code=dztja3n5",nocase; classtype:attempted-recon; sid:200005219; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/02l017",nocase; classtype:attempted-recon; sid:200005220; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/3roxm2",nocase; classtype:attempted-recon; sid:200005221; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/bvha",nocase; classtype:attempted-recon; sid:200005222; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/cox-communicationn",nocase; classtype:attempted-recon; sid:200005223; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/jvq14n",nocase; classtype:attempted-recon; sid:200005224; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/vvolr6",nocase; classtype:attempted-recon; sid:200005225; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/xr0kjv",nocase; classtype:attempted-recon; sid:200005226; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attweb",nocase; classtype:attempted-recon; sid:200005227; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attyahoomail",nocase; classtype:attempted-recon; sid:200005228; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/c0xadmin",nocase; classtype:attempted-recon; sid:200005229; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/chartar",nocase; classtype:attempted-recon; sid:200005230; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/charter1",nocase; classtype:attempted-recon; sid:200005231; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/coocw",nocase; classtype:attempted-recon; sid:200005232; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/executedinvestmentprojectdocs",nocase; classtype:attempted-recon; sid:200005233; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/oeeieie",nocase; classtype:attempted-recon; sid:200005234; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/pierce_dusty",nocase; classtype:attempted-recon; sid:200005235; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/poihbj",nocase; classtype:attempted-recon; sid:200005236; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/ruggu",nocase; classtype:attempted-recon; sid:200005237; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/securitemenegerteam",nocase; classtype:attempted-recon; sid:200005238; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/service.orange",nocase; classtype:attempted-recon; sid:200005239; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/spectrum12",nocase; classtype:attempted-recon; sid:200005240; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/spectrum7",nocase; classtype:attempted-recon; sid:200005241; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livenmitac-my.sharepoint.com",nocase; http_uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear%2fk%3d&docid=1_169208e425ed84fea9fd294a6886d67e9&wdformid=%7b06255f86%2d4bf9%2d4ee8%2dbd7e%2dfef81913a79b%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200005242; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livenmitac-my.sharepoint.com",nocase; http_uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear/k=&\;docid=1_169208e425ed84fea9fd294a6886d67e9&\;wdformid={06255f86-4bf9-4ee8-bd7e-fef81913a79b}&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200005243; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/di6hueus",nocase; classtype:attempted-recon; sid:200005244; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/efkgvmfs",nocase; classtype:attempted-recon; sid:200005245; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ej2zqd8m",nocase; classtype:attempted-recon; sid:200005246; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lobstex.com",nocase; http_uri; content:"/mailserver/newestupdate/retry.php",nocase; classtype:attempted-recon; sid:200005247; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logcabins.lv",nocase; http_uri; content:"/zibra/zee/?email=info@westonforest.com",nocase; classtype:attempted-recon; sid:200005248; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-live.com-s02.net",nocase; http_uri; content:"/de/?code=1a468e385b9475ae1d0bfa645841a01f",nocase; classtype:attempted-recon; sid:200005249; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.xfinity.meculinkvolt.com",nocase; http_uri; content:"/home/?6c6f67696e2e7866696e6974792e6d6563756c696e6b766f6c742e636f6d-6c6f67696e2e7866696e6974792e6d6563756c696e6b766f6c742e636f6d-6c6f67696e2e7866696e6974792e6d6563756c696e6b766f6c742e636f6d-6c6f67696e2e7866696e6974792e6d6563756c696e6b766f6c742e636f6d",nocase; classtype:attempted-recon; sid:200005250; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lolosamarte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005251; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lynk.id",nocase; http_uri; content:"/pubg__reward",nocase; classtype:attempted-recon; sid:200005252; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/almost2.html",nocase; classtype:attempted-recon; sid:200005253; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s1.html",nocase; classtype:attempted-recon; sid:200005254; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s2.html",nocase; classtype:attempted-recon; sid:200005255; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s3.html",nocase; classtype:attempted-recon; sid:200005256; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s4.html",nocase; classtype:attempted-recon; sid:200005257; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s5.html",nocase; classtype:attempted-recon; sid:200005258; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s6.html",nocase; classtype:attempted-recon; sid:200005259; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s7.html",nocase; classtype:attempted-recon; sid:200005260; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/subscribe.html",nocase; classtype:attempted-recon; sid:200005261; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magyarpoosta.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200005262; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahalaxmibeachresort.com",nocase; http_uri; content:"/postal/home",nocase; classtype:attempted-recon; sid:200005263; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.hfcfit.com",nocase; http_uri; content:"/forms/forms/form1.html",nocase; classtype:attempted-recon; sid:200005264; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/179.32.144.1585349/sucursalpersonas.transaccionesbancolombia.com/mua",nocase; classtype:attempted-recon; sid:200005265; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/179.32.144.1585349/sucursalpersonas.transaccionesbancolombia.com/mua/",nocase; classtype:attempted-recon; sid:200005266; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/181.143.31.2028037/sucursalpersonas.transaccionesbancolombia.com/mua",nocase; classtype:attempted-recon; sid:200005267; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/181.143.31.2028037/sucursalpersonas.transaccionesbancolombia.com/mua/",nocase; classtype:attempted-recon; sid:200005268; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/186.154.25.1064023/sucursalpersonas.transaccionesbancolombia.com/mua",nocase; classtype:attempted-recon; sid:200005269; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/186.154.25.1064023/sucursalpersonas.transaccionesbancolombia.com/mua/",nocase; classtype:attempted-recon; sid:200005270; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/190.27.90.2077221/sucursalpersonas.transaccionesbancolombia.com/mua/index.html",nocase; classtype:attempted-recon; sid:200005271; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/190.61.55.2105806/sucursalpersonas.transaccionesbancolombia.com/mua/index.html",nocase; classtype:attempted-recon; sid:200005272; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/191.110.122.835718/sucursalpersonas.transaccionesbancolombia.com/mua",nocase; classtype:attempted-recon; sid:200005273; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/191.110.122.835718/sucursalpersonas.transaccionesbancolombia.com/mua/",nocase; classtype:attempted-recon; sid:200005274; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/191.95.152.1287758/sucursalpersonas.transaccionesbancolombia.com/mua/index.html",nocase; classtype:attempted-recon; sid:200005275; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.trendset.com.ar.ci3.toservers.com",nocase; http_uri; content:"/mua/201.233.42.1501206/sucursalpersonas.transaccionesbancolombia.com/mua/index.html",nocase; classtype:attempted-recon; sid:200005276; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayorca-travel.com",nocase; http_uri; content:"/wp-includes/js/tinymce/plugins/wpview/vestyrg/csrferfad/nynhrger/saexxsee/sp.xxx/sfsfsggg/nmunyunuyszs/xxawwddad/nuymyaxa/xadadad/cvbnmjdd/xadadmkl/sp_xx/1n2mynzc=/",nocase; classtype:attempted-recon; sid:200005277; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayorca-travel.com",nocase; http_uri; content:"/wp-includes/js/tinymce/plugins/wpview/vestyrg/csrferfad/nynhrger/saexxsee/sp.xxx/sfsfsggg/nmunyunuyszs/xxawwddad/nuymyaxa/xadadad/cvbnmjdd/xadadmkl/sp_xx/4ztvhnja=/",nocase; classtype:attempted-recon; sid:200005278; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayorca-travel.com",nocase; http_uri; content:"/wp-includes/js/tinymce/plugins/wpview/vestyrg/csrferfad/nynhrger/saexxsee/sp.xxx/sfsfsggg/nmunyunuyszs/xxawwddad/nuymyaxa/xadadad/cvbnmjdd/xadadmkl/sp_xx/5mzqwmdm=/",nocase; classtype:attempted-recon; sid:200005279; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayorca-travel.com",nocase; http_uri; content:"/wp-includes/js/tinymce/plugins/wpview/vestyrg/csrferfad/nynhrger/saexxsee/sp.xxx/sfsfsggg/nmunyunuyszs/xxawwddad/nuymyaxa/xadadad/cvbnmjdd/xadadmkl/sp_xx/xnji4nza=/",nocase; classtype:attempted-recon; sid:200005280; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayorca-travel.com",nocase; http_uri; content:"/wp-includes/js/tinymce/plugins/wpview/vestyrg/csrferfad/nynhrger/saexxsee/sp.xxx/sfsfsggg/nmunyunuyszs/xxawwddad/nuymyaxa/xadadad/cvbnmjdd/xadadmkl/sp_xx/znwewogy=/",nocase; classtype:attempted-recon; sid:200005281; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayorca-travel.com",nocase; http_uri; content:"/wp-includes/js/tinymce/plugins/wpview/vestyrg/csrferfad/nynhrger/saexxsee/sp.xxx/sfsfsggg/nmunyunuyszs/xxawwddad/nuymyaxa/xadadad/cvbnmjdd/xadadmkl/sp_xx/zyjbhyzg=/",nocase; classtype:attempted-recon; sid:200005282; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"me2.kr",nocase; http_uri; content:"/qpwha",nocase; classtype:attempted-recon; sid:200005283; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mi.jetblue.com",nocase; http_uri; content:"/p/cp/0ccc3066dc2bcd17/c?mi_u=87923176&mi_origin=&url=http://email.stickercanada.com/t?entity_type=2&entity_id=32534&email_pref_id=34785928&sent_id=1600423397&service_id=22668&redirect_url=https:/relievehotmailonly.cloudns.cl/imagineme/ionos.php",nocase; classtype:attempted-recon; sid:200005284; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.jcb.co.jp.sdcjt.com",nocase; http_uri; content:"/index.html",nocase; classtype:attempted-recon; sid:200005285; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nabprotect.com",nocase; http_uri; content:"/ib/",nocase; classtype:attempted-recon; sid:200005286; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/jv88am",nocase; classtype:attempted-recon; sid:200005287; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/mb85ln",nocase; classtype:attempted-recon; sid:200005288; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/rxpd8q",nocase; classtype:attempted-recon; sid:200005289; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/waliii",nocase; classtype:attempted-recon; sid:200005290; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netorg6600800-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/ginger_gingerfountain_com/_layouts/15/wopiframe.aspx?guestaccesstoken=gpys8ex7ys1urrzbfeasvlexkodtrovmmcpn%2brsnebs%3d&\;docid=1_1882b07b5eb5643d2bdaa63426324ef0e&\;wdformid=%7b9bd54af1%2dee16%2d4e07%2d8d62%2d6e9b76e47512%7d&\;action=formsubmit&\;cid=9adf3e74-8cc1-4e36-b545-c9165fcafde7",nocase; classtype:attempted-recon; sid:200005291; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nexoinmobiliario.pe",nocase; http_uri; content:"/bancos/interbank",nocase; classtype:attempted-recon; sid:200005292; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"norwayposten.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200005293; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nt.embluemail.com",nocase; http_uri; content:"/p/cl?data=3dzhsrhni9gfnm5yhfeluhcc3s9a2efgrjpc5=cr%2fj%2be08gapchysro05l7s3mgohtp8ditnifwrg68fk%2frmcugsx39wqz%2b1rpnasocds=ohsww%3d!-!:b3ei:!-!https%3a%2f%2f233nu.codesandbox.io?af=3dy2fizw5uzxr0mja=wnebvchr1c25ldc5jb20uyxu=3d",nocase; classtype:attempted-recon; sid:200005294; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objectstorage.us-phoenix-1.oraclecloud.com",nocase; http_uri; content:"/n/axjt4zimmriy/b/cherishppps-20210930-1214/o/spaceblack.html",nocase; classtype:attempted-recon; sid:200005295; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oiazeiuiazolme.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005296; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onescreener.com",nocase; http_uri; content:"/orange-webmail",nocase; classtype:attempted-recon; sid:200005297; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.visual-paradigm.com",nocase; http_uri; content:"/app/forms/view/zalxyved/a9adea36-d163-4d46-a3de-0e990d86e78e",nocase; classtype:attempted-recon; sid:200005298; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinecasinospark.com",nocase; http_uri; content:"/ions/index.php?email=redacted@abuse.ionos.com",nocase; classtype:attempted-recon; sid:200005299; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ottojohansen-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/maybritt_otto-johansen_dk/etjxb8525cvkoyguxtsnsh4bjpcfy8xmapg2hdyfezvoha",nocase; classtype:attempted-recon; sid:200005300; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paozeia.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005301; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paws.org.au",nocase; http_uri; content:"/store/admin/view/javascript/fckeditor/editor/plugins/valid.free.fr/adsl",nocase; classtype:attempted-recon; sid:200005302; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paws.org.au",nocase; http_uri; content:"/store/admin/view/javascript/fckeditor/editor/plugins/valid.free.fr/adsl/",nocase; classtype:attempted-recon; sid:200005303; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment-swiss-post.eu",nocase; http_uri; content:"/session.36978546539976536597765390659076375965307357647386543078654097865078965078635/seleccione_medio_de_pago.php",nocase; classtype:attempted-recon; sid:200005304; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal-inc-userupdatenuber7925570844.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200005305; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perspectivart.com",nocase; http_uri; content:"/orn.html",nocase; classtype:attempted-recon; sid:200005306; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pilgrimapp.com",nocase; http_uri; content:"/wp-mails/",nocase; classtype:attempted-recon; sid:200005307; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fia8mx",nocase; classtype:attempted-recon; sid:200005308; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fva4wx",nocase; classtype:attempted-recon; sid:200005309; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fvakzx",nocase; classtype:attempted-recon; sid:200005310; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fvllvx",nocase; classtype:attempted-recon; sid:200005311; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proprofs.com",nocase; http_uri; content:"/survey/t/?title=bt-broadband-and-private-policy-support_20",nocase; classtype:attempted-recon; sid:200005312; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub5.bravenet.com",nocase; http_uri; content:"/emailfwd/show.php?usernum=350311855&\;formid=3879",nocase; classtype:attempted-recon; sid:200005313; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja",nocase; classtype:attempted-recon; sid:200005314; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=3caq0rhw&signature=newsletter",nocase; classtype:attempted-recon; sid:200005315; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=aztuf5rl&signature=newsletter",nocase; classtype:attempted-recon; sid:200005316; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=f6rhnj0k&signature=newsletter",nocase; classtype:attempted-recon; sid:200005317; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=fppisb1v&signature=newsletter",nocase; classtype:attempted-recon; sid:200005318; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=iko9jrni&signature=newsletter",nocase; classtype:attempted-recon; sid:200005319; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=kuap5z4b&signature=newsletter",nocase; classtype:attempted-recon; sid:200005320; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=pxxnldhy&signature=newsletter",nocase; classtype:attempted-recon; sid:200005321; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=rul1fdqi&signature=newsletter",nocase; classtype:attempted-recon; sid:200005322; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=sbhccydn&signature=newsletter",nocase; classtype:attempted-recon; sid:200005323; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=zcrkojr4&signature=newsletter",nocase; classtype:attempted-recon; sid:200005324; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bciaja?trackingid=zfo3ypwl&signature=newsletter",nocase; classtype:attempted-recon; sid:200005325; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bcikut",nocase; classtype:attempted-recon; sid:200005326; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bcj1ds",nocase; classtype:attempted-recon; sid:200005327; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qualitasc-my.sharepoint.com",nocase; http_uri; content:"/personal/lrodriguez_qualita_es/_layouts/15/wopiframe.aspx?guestaccesstoken=x6egjunw%2bncgnemfdqjrmoajqkuc9c41sq13edqfoeu%3d&docid=1_16dc35173dd06466fa8c37e332833f0bd&wdformid=%7b67d0feef%2d08d4%2d4d0a%2d8a25%2d0d2c9b0a2eed%7d%2f&action=formsubmit",nocase; classtype:attempted-recon; sid:200005328; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qualitasc-my.sharepoint.com",nocase; http_uri; content:"/personal/lrodriguez_qualita_es/_layouts/15/wopiframe.aspx?guestaccesstoken=x6egjunw%2bncgnemfdqjrmoajqkuc9c41sq13edqfoeu%3d&docid=1_16dc35173dd06466fa8c37e332833f0bd&wdformid=%7b67d0feef%2d08d4%2d4d0a%2d8a25%2d0d2c9b0a2eed%7d%3e%2f&action=formsubmit",nocase; classtype:attempted-recon; sid:200005329; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qualitasc-my.sharepoint.com",nocase; http_uri; content:"/personal/lrodriguez_qualita_es/_layouts/15/wopiframe.aspx?guestaccesstoken=x6egjunw%2bncgnemfdqjrmoajqkuc9c41sq13edqfoeu%3d&docid=1_16dc35173dd06466fa8c37e332833f0bd&wdformid=%7b67d0feef%2d08d4%2d4d0a%2d8a25%2d0d2c9b0a2eed%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200005330; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quip.com",nocase; http_uri; content:"/jeh2aebbsh97",nocase; classtype:attempted-recon; sid:200005331; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quip.com",nocase; http_uri; content:"/qv7malu8n7cz/you-have-some-messages-pending",nocase; classtype:attempted-recon; sid:200005332; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r3g34.fra1.digitaloceanspaces.com",nocase; http_uri; content:"/77ll23ween.html",nocase; classtype:attempted-recon; sid:200005333; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rabofree.blogspot.com",nocase; http_uri; content:"/2020?m=1",nocase; classtype:attempted-recon; sid:200005334; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reamaam.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005335; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/z83ig2n?rb.routing.mode=proxy&\;rb.routing.signature=123%20836",nocase; classtype:attempted-recon; sid:200005336; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redatofadesafe.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005337; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reikreitel.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005338; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/xeknoz?confirmation",nocase; classtype:attempted-recon; sid:200005339; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/xgmxr1",nocase; classtype:attempted-recon; sid:200005340; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rezunz.quip.com",nocase; http_uri; content:"/2d0jazx1eky5/click-here-to-verify-your-email",nocase; classtype:attempted-recon; sid:200005341; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riderctposten.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200005342; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roberthood.net",nocase; http_uri; content:"/me/young/quak",nocase; classtype:attempted-recon; sid:200005343; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/1175216918/profile",nocase; classtype:attempted-recon; sid:200005344; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/2003338222/profile",nocase; classtype:attempted-recon; sid:200005345; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/2503384048/profile",nocase; classtype:attempted-recon; sid:200005346; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/3093473318/profile",nocase; classtype:attempted-recon; sid:200005347; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/3963179650/profile",nocase; classtype:attempted-recon; sid:200005348; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/4069575687/profile",nocase; classtype:attempted-recon; sid:200005349; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/436924173/profile",nocase; classtype:attempted-recon; sid:200005350; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/451791917/profile",nocase; classtype:attempted-recon; sid:200005351; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/5897495978/profile",nocase; classtype:attempted-recon; sid:200005352; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/5992961534/profile",nocase; classtype:attempted-recon; sid:200005353; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/7030412116/profile",nocase; classtype:attempted-recon; sid:200005354; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/7211612111/profile",nocase; classtype:attempted-recon; sid:200005355; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/8649760388/profile",nocase; classtype:attempted-recon; sid:200005356; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/8915312080/profile",nocase; classtype:attempted-recon; sid:200005357; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/9037664205/profile",nocase; classtype:attempted-recon; sid:200005358; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/9124853509/profile",nocase; classtype:attempted-recon; sid:200005359; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/9919545661/profile",nocase; classtype:attempted-recon; sid:200005360; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roblox.com.do",nocase; http_uri; content:"/users/9925944648/profile",nocase; classtype:attempted-recon; sid:200005361; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rotf.lol",nocase; http_uri; content:"/2p8k3vkw/?aepzuemritx/jasrqjibdy",nocase; classtype:attempted-recon; sid:200005362; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roygijvhluozwnflsypmewrstt.gl44393333333.rj.r.appspot.com",nocase; http_uri; content:"/favicon.ico/",nocase; classtype:attempted-recon; sid:200005363; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-sparkasse-de",nocase; classtype:attempted-recon; sid:200005364; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/t8gu",nocase; classtype:attempted-recon; sid:200005365; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/ytk-r",nocase; classtype:attempted-recon; sid:200005366; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/progressivebank-uat/index.html",nocase; classtype:attempted-recon; sid:200005367; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samirsonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005368; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanclemente.cl",nocase; http_uri; content:"/carli_lamell.html",nocase; classtype:attempted-recon; sid:200005369; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandert12.blogspot.com",nocase; http_uri; content:"/p/la-banque-postale.html",nocase; classtype:attempted-recon; sid:200005370; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sateegourmet.com",nocase; http_uri; content:"/sbot",nocase; classtype:attempted-recon; sid:200005371; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sefonta.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005372; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"select.com.pk",nocase; http_uri; content:"/wp/wp-admin/admin/file/api.html",nocase; classtype:attempted-recon; sid:200005373; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seonewsservic.blogspot.com",nocase; http_uri; content:"/p/postenno_9.html",nocase; classtype:attempted-recon; sid:200005374; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharafit.com",nocase; http_uri; content:"/wp-admin/usa-poste/",nocase; classtype:attempted-recon; sid:200005375; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1fni_ent2sao6wqv0vzdn7g8nl9d",nocase; classtype:attempted-recon; sid:200005376; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-document.com",nocase; http_uri; content:"/basic.php?k=d63621ef3dc01735479befc13f97ec7fdb68991d",nocase; classtype:attempted-recon; sid:200005377; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopee-cny.blogspot.com",nocase; http_uri; content:"/p/contact-us.html",nocase; classtype:attempted-recon; sid:200005378; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.at",nocase; http_uri; content:"/nqgu1",nocase; classtype:attempted-recon; sid:200005379; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simp.ly",nocase; http_uri; content:"/publish/xhrdvc",nocase; classtype:attempted-recon; sid:200005380; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitemodify.com",nocase; http_uri; content:"/preview/83f256cd?device=desktop",nocase; classtype:attempted-recon; sid:200005381; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/a/sy4norton.com/setup/home",nocase; classtype:attempted-recon; sid:200005382; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/orange-mobiles/home",nocase; classtype:attempted-recon; sid:200005383; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/e9d24c72/23524457",nocase; classtype:attempted-recon; sid:200005384; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/habbotuttogratis",nocase; classtype:attempted-recon; sid:200005385; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/habbotuttogratis/assignments",nocase; classtype:attempted-recon; sid:200005386; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/libretyreserve",nocase; classtype:attempted-recon; sid:200005387; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/libretyreserve/",nocase; classtype:attempted-recon; sid:200005388; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/protectedinmprovmnt44/",nocase; classtype:attempted-recon; sid:200005389; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/safetycheck427064200647221/",nocase; classtype:attempted-recon; sid:200005390; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/verifycheckpointpaqes/",nocase; classtype:attempted-recon; sid:200005391; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/08ie-securepage-facebook",nocase; classtype:attempted-recon; sid:200005392; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/0iey-securepage-facebook",nocase; classtype:attempted-recon; sid:200005393; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/2-orangebank-salva/accueil",nocase; classtype:attempted-recon; sid:200005394; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/3-orangebank-vetch/accueil",nocase; classtype:attempted-recon; sid:200005395; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/4-orangebank-toto/accueil",nocase; classtype:attempted-recon; sid:200005396; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/65h7t65ygtdw5f4/bt",nocase; classtype:attempted-recon; sid:200005397; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/aattt/home",nocase; classtype:attempted-recon; sid:200005398; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/abuse-privacy/",nocase; classtype:attempted-recon; sid:200005399; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-office-docxpdf-call-net/home",nocase; classtype:attempted-recon; sid:200005400; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/activationagrisecuriplus/accueil",nocase; classtype:attempted-recon; sid:200005401; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/alert-app-pages/",nocase; classtype:attempted-recon; sid:200005402; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/app-mobile-uuid/recovery",nocase; classtype:attempted-recon; sid:200005403; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-ob/accueil",nocase; classtype:attempted-recon; sid:200005404; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-securite-ob/accueil",nocase; classtype:attempted-recon; sid:200005405; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appsconfirms",nocase; classtype:attempted-recon; sid:200005406; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/aqwsas",nocase; classtype:attempted-recon; sid:200005407; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/asdfghjklhgfdsdfgh/home",nocase; classtype:attempted-recon; sid:200005408; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-managements/home",nocase; classtype:attempted-recon; sid:200005409; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemail56/home?authuser=3",nocase; classtype:attempted-recon; sid:200005410; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemailfox7/home",nocase; classtype:attempted-recon; sid:200005411; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemler7/home",nocase; classtype:attempted-recon; sid:200005412; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attfeatures/home",nocase; classtype:attempted-recon; sid:200005413; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attfoxemail6/home",nocase; classtype:attempted-recon; sid:200005414; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attweb22/home",nocase; classtype:attempted-recon; sid:200005415; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attyahooohroffice231/home",nocase; classtype:attempted-recon; sid:200005416; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/audio-call-net/home",nocase; classtype:attempted-recon; sid:200005417; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/audio-mp-vm/home",nocase; classtype:attempted-recon; sid:200005418; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-apps-ob/accueil",nocase; classtype:attempted-recon; sid:200005419; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-ob/accueil",nocase; classtype:attempted-recon; sid:200005420; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-orangebank-eu/accueil",nocase; classtype:attempted-recon; sid:200005421; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentifications-ob/accueil",nocase; classtype:attempted-recon; sid:200005422; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/awspage",nocase; classtype:attempted-recon; sid:200005423; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/banquepostalebanqueetassurance/accueil",nocase; classtype:attempted-recon; sid:200005424; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bcp-mille/home-page",nocase; classtype:attempted-recon; sid:200005425; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/benachrichtigung-sparkasse/accueil",nocase; classtype:attempted-recon; sid:200005426; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-cloud-voice-review-voice/bt-voice-cloud",nocase; classtype:attempted-recon; sid:200005427; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-clould-preview000112/voice010101010bt-cloud?authuser=8",nocase; classtype:attempted-recon; sid:200005428; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-pdf-receipt-payment/www-bt-pdf?authuser=8",nocase; classtype:attempted-recon; sid:200005429; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-voice1010010/bt-voicemesaage10120201002?authuser=8",nocase; classtype:attempted-recon; sid:200005430; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-voicee/bt",nocase; classtype:attempted-recon; sid:200005431; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbilluserbt/bt-user",nocase; classtype:attempted-recon; sid:200005432; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbanda/home",nocase; classtype:attempted-recon; sid:200005433; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbtbtbtbtbtcomm/home",nocase; classtype:attempted-recon; sid:200005434; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbusinessx/bt",nocase; classtype:attempted-recon; sid:200005435; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcloudpaymentinvoice202000/httpsbtcloudvm-voice-new?authuser=1",nocase; classtype:attempted-recon; sid:200005436; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcomms-/bt",nocase; classtype:attempted-recon; sid:200005437; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcoms-/bt",nocase; classtype:attempted-recon; sid:200005438; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcoms/bt",nocase; classtype:attempted-recon; sid:200005439; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectbusiness/btconnect",nocase; classtype:attempted-recon; sid:200005440; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectmailserver/home",nocase; classtype:attempted-recon; sid:200005441; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btinternetco/home",nocase; classtype:attempted-recon; sid:200005442; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btioyugfyugcfxg/home",nocase; classtype:attempted-recon; sid:200005443; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btmv-voice-notice011/btvoicemessage?authuser=8",nocase; classtype:attempted-recon; sid:200005444; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btnvm-urgentnotice/btvmnew-note?authuser=1",nocase; classtype:attempted-recon; sid:200005445; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btsq/home",nocase; classtype:attempted-recon; sid:200005446; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttbusinesssss/home",nocase; classtype:attempted-recon; sid:200005447; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businessbt-bt/bt",nocase; classtype:attempted-recon; sid:200005448; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businessbtbill-secure/bt",nocase; classtype:attempted-recon; sid:200005449; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businessbtsecur/bt",nocase; classtype:attempted-recon; sid:200005450; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/capitaloneloginus/home",nocase; classtype:attempted-recon; sid:200005451; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/charlisto/accueil",nocase; classtype:attempted-recon; sid:200005452; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/clickpagenewlogin2021",nocase; classtype:attempted-recon; sid:200005453; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/coinsbuysellswapcryptocurrency/?fbclid=iwar2isl9xfxxgcxtftml2hmcl_dglhshlkfkpdotycyqu-qjqqfdqm9whtfm",nocase; classtype:attempted-recon; sid:200005454; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/comfimobiekdofl/accueil",nocase; classtype:attempted-recon; sid:200005455; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/community-pages-app/",nocase; classtype:attempted-recon; sid:200005456; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmation-orangabank/accueil",nocase; classtype:attempted-recon; sid:200005457; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmationacces",nocase; classtype:attempted-recon; sid:200005458; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectolo/accueil",nocase; classtype:attempted-recon; sid:200005459; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ctz03",nocase; classtype:attempted-recon; sid:200005460; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/currentlyserver/home",nocase; classtype:attempted-recon; sid:200005461; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfghjhckuyf/home",nocase; classtype:attempted-recon; sid:200005462; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfghjhl/home",nocase; classtype:attempted-recon; sid:200005463; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfuhiuiuewiew/home?authuser=6",nocase; classtype:attempted-recon; sid:200005464; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dkdfkazii-ofoqisjaz1wk/accueil",nocase; classtype:attempted-recon; sid:200005465; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dkekkeole/home",nocase; classtype:attempted-recon; sid:200005466; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dretjhr6iy4j5iegrf/bt",nocase; classtype:attempted-recon; sid:200005467; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dumes/accueil",nocase; classtype:attempted-recon; sid:200005468; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dvrbtrethy5642qwrfvd/bt",nocase; classtype:attempted-recon; sid:200005469; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-orange-vocal/accueil",nocase; classtype:attempted-recon; sid:200005470; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocalorange-ref0325/",nocase; classtype:attempted-recon; sid:200005471; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocalorange-ref0325/accueil",nocase; classtype:attempted-recon; sid:200005472; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espacemessagerieorangesms/accueil",nocase; classtype:attempted-recon; sid:200005473; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/etyajdnxnskoeprlwyaxbdhfkrituy/btconnect",nocase; classtype:attempted-recon; sid:200005474; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ewyy65/home",nocase; classtype:attempted-recon; sid:200005475; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ewyy65/home?authuser=3",nocase; classtype:attempted-recon; sid:200005476; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/exodus-wallet-shared-rewards",nocase; classtype:attempted-recon; sid:200005477; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/feelblessed/bt-business",nocase; classtype:attempted-recon; sid:200005478; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fhbdbjfdbjfjf/home",nocase; classtype:attempted-recon; sid:200005479; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fhgfbythfrsv/bt",nocase; classtype:attempted-recon; sid:200005480; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/form-recovery/",nocase; classtype:attempted-recon; sid:200005481; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/form-recovery/details",nocase; classtype:attempted-recon; sid:200005482; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gbghtoyerfvfk/btb",nocase; classtype:attempted-recon; sid:200005483; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gdhbfcxzx",nocase; classtype:attempted-recon; sid:200005484; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ghddhsh12/home",nocase; classtype:attempted-recon; sid:200005485; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hbxchx",nocase; classtype:attempted-recon; sid:200005486; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hccwc/home",nocase; classtype:attempted-recon; sid:200005487; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/home-bt-updates/bt-com",nocase; classtype:attempted-recon; sid:200005488; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/home-pages-recovery/details",nocase; classtype:attempted-recon; sid:200005489; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/htvvss/home?authuser=3",nocase; classtype:attempted-recon; sid:200005490; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ii-securepage-facebook",nocase; classtype:attempted-recon; sid:200005491; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/invoice-payment-pdf/home",nocase; classtype:attempted-recon; sid:200005492; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/invoicehomepdf/home",nocase; classtype:attempted-recon; sid:200005493; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jcnvvn/home",nocase; classtype:attempted-recon; sid:200005494; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jmjmnhvdc/home",nocase; classtype:attempted-recon; sid:200005495; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/labred-authentification-source/accueil",nocase; classtype:attempted-recon; sid:200005496; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/leafadd/accueil",nocase; classtype:attempted-recon; sid:200005497; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/log-inpagenew",nocase; classtype:attempted-recon; sid:200005498; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mcwdbvefjberjrwgnwriviwr/home",nocase; classtype:attempted-recon; sid:200005499; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mersmesrs/home",nocase; classtype:attempted-recon; sid:200005500; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messor/accueil",nocase; classtype:attempted-recon; sid:200005501; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mobile-apps-pages/",nocase; classtype:attempted-recon; sid:200005502; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mobile-redirect-system",nocase; classtype:attempted-recon; sid:200005503; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mtmbt-business/home?authuser=1",nocase; classtype:attempted-recon; sid:200005504; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mv-voicepage/home?authuser=8",nocase; classtype:attempted-recon; sid:200005505; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/myatt-home/home",nocase; classtype:attempted-recon; sid:200005506; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mycoinwallet/",nocase; classtype:attempted-recon; sid:200005507; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/necrologieinfosfroravocal/accueil",nocase; classtype:attempted-recon; sid:200005508; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newbtmissedcall/home",nocase; classtype:attempted-recon; sid:200005509; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newuploadpage",nocase; classtype:attempted-recon; sid:200005510; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newvoicemail/home?authuser=1",nocase; classtype:attempted-recon; sid:200005511; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nextprojectpage",nocase; classtype:attempted-recon; sid:200005512; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nextprojectpage2022",nocase; classtype:attempted-recon; sid:200005513; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticeplaypagenew2021",nocase; classtype:attempted-recon; sid:200005514; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticepublicpagenew2021",nocase; classtype:attempted-recon; sid:200005515; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/notifcationnoticesystempage",nocase; classtype:attempted-recon; sid:200005516; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nouveau-sms-message-vocal/accueil",nocase; classtype:attempted-recon; sid:200005517; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-seccurite/accueil",nocase; classtype:attempted-recon; sid:200005518; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite-/accueil",nocase; classtype:attempted-recon; sid:200005519; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite/accueil",nocase; classtype:attempted-recon; sid:200005520; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securites/accueil",nocase; classtype:attempted-recon; sid:200005521; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-service/accueil",nocase; classtype:attempted-recon; sid:200005522; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-services/accueil",nocase; classtype:attempted-recon; sid:200005523; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/offiice-voice-com/home",nocase; classtype:attempted-recon; sid:200005524; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/onlinefifthercheckaccout/home",nocase; classtype:attempted-recon; sid:200005525; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangb-securite/accueil",nocase; classtype:attempted-recon; sid:200005526; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-b-securite/accueil",nocase; classtype:attempted-recon; sid:200005527; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles",nocase; classtype:attempted-recon; sid:200005528; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb-190/accueil",nocase; classtype:attempted-recon; sid:200005529; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb171/accueil",nocase; classtype:attempted-recon; sid:200005530; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb221/accueil",nocase; classtype:attempted-recon; sid:200005531; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeba/accueil",nocase; classtype:attempted-recon; sid:200005532; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeban/accueil",nocase; classtype:attempted-recon; sid:200005533; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-22/accueil",nocase; classtype:attempted-recon; sid:200005534; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-r/accueil",nocase; classtype:attempted-recon; sid:200005535; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-sc/accueil",nocase; classtype:attempted-recon; sid:200005536; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-secure-secure/accueil",nocase; classtype:attempted-recon; sid:200005537; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebanksecurite/accueil",nocase; classtype:attempted-recon; sid:200005538; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebannk/accueil",nocase; classtype:attempted-recon; sid:200005539; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeibank/accueil",nocase; classtype:attempted-recon; sid:200005540; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeinfosvocalnews/accueil",nocase; classtype:attempted-recon; sid:200005541; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangemyconnect/accueil",nocase; classtype:attempted-recon; sid:200005542; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/oranggebank/accueil",nocase; classtype:attempted-recon; sid:200005543; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangiebank/accueil",nocase; classtype:attempted-recon; sid:200005544; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pagenewlogin2022",nocase; classtype:attempted-recon; sid:200005545; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/palei/",nocase; classtype:attempted-recon; sid:200005546; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pass-press/accueil",nocase; classtype:attempted-recon; sid:200005547; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-customer-services/",nocase; classtype:attempted-recon; sid:200005548; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-loginn/",nocase; classtype:attempted-recon; sid:200005549; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pfherjwlsnmcyelwudy/home?authuser=3",nocase; classtype:attempted-recon; sid:200005550; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleasecheckpoint2021",nocase; classtype:attempted-recon; sid:200005551; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleaseclickplaypagenew",nocase; classtype:attempted-recon; sid:200005552; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/postacerticodplusaccaccueil/accueil",nocase; classtype:attempted-recon; sid:200005553; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/preferences-coordonnees?bredbanquepopulaire.fr/authentification/transactionnel",nocase; classtype:attempted-recon; sid:200005554; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/protonmailservice/home",nocase; classtype:attempted-recon; sid:200005555; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pstbrand",nocase; classtype:attempted-recon; sid:200005556; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/quickmailer/yahoo-com",nocase; classtype:attempted-recon; sid:200005557; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/quickteamservice/yahoo-com",nocase; classtype:attempted-recon; sid:200005558; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/reactivationhelp2021/",nocase; classtype:attempted-recon; sid:200005559; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirect-acctpages-uuid/details",nocase; classtype:attempted-recon; sid:200005560; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirectme-to/",nocase; classtype:attempted-recon; sid:200005561; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/reviewappspagerviicee/",nocase; classtype:attempted-recon; sid:200005562; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/reviewappspagerviiceee",nocase; classtype:attempted-recon; sid:200005563; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rg9eur94uwe9d/bt",nocase; classtype:attempted-recon; sid:200005564; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/richcoff/bt-business",nocase; classtype:attempted-recon; sid:200005565; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rimekahsdjg/summary_page",nocase; classtype:attempted-recon; sid:200005566; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/salimkaso/",nocase; classtype:attempted-recon; sid:200005567; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalm/home?authuser=1",nocase; classtype:attempted-recon; sid:200005568; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalnetbellsouth/att-yahoo-mail-com",nocase; classtype:attempted-recon; sid:200005569; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcweb22/home",nocase; classtype:attempted-recon; sid:200005570; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securbtbusiness/bt",nocase; classtype:attempted-recon; sid:200005571; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-bt-homevoice01010120/home?authuser=8",nocase; classtype:attempted-recon; sid:200005572; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-ob-/accueil",nocase; classtype:attempted-recon; sid:200005573; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-ob/accueil",nocase; classtype:attempted-recon; sid:200005574; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securebt-business/bt",nocase; classtype:attempted-recon; sid:200005575; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securebtcomms/bt",nocase; classtype:attempted-recon; sid:200005576; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securebtcommss/bt",nocase; classtype:attempted-recon; sid:200005577; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securebusinessbtsecurbt/bt",nocase; classtype:attempted-recon; sid:200005578; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securiplus0101/accueil",nocase; classtype:attempted-recon; sid:200005579; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-ob-service/accueil",nocase; classtype:attempted-recon; sid:200005580; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-obank/accueil",nocase; classtype:attempted-recon; sid:200005581; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securitee-ob/accueil",nocase; classtype:attempted-recon; sid:200005582; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securites-ob/accueil",nocase; classtype:attempted-recon; sid:200005583; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securmybusinessbtsecurbt/bt",nocase; classtype:attempted-recon; sid:200005584; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securree/home?authuser=1",nocase; classtype:attempted-recon; sid:200005585; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securritee-ob/accueil",nocase; classtype:attempted-recon; sid:200005586; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob-authentification/accueil",nocase; classtype:attempted-recon; sid:200005587; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob-securite/accueil",nocase; classtype:attempted-recon; sid:200005588; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob/accueil",nocase; classtype:attempted-recon; sid:200005589; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-obank/accueil",nocase; classtype:attempted-recon; sid:200005590; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serveur-communication-box/accueil",nocase; classtype:attempted-recon; sid:200005591; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/servi-orangbank/accueil",nocase; classtype:attempted-recon; sid:200005592; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-orangebank-fr/accueil",nocase; classtype:attempted-recon; sid:200005593; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-orangebank-securi/accueil",nocase; classtype:attempted-recon; sid:200005594; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-securite-ob/accueil",nocase; classtype:attempted-recon; sid:200005595; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/servicenewlogin",nocase; classtype:attempted-recon; sid:200005596; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/shgeudh/home",nocase; classtype:attempted-recon; sid:200005597; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ski03/strona-g%c5%82%c3%b3wna",nocase; classtype:attempted-recon; sid:200005598; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/soeyankandi5/bt-business",nocase; classtype:attempted-recon; sid:200005599; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/szdgsdhgd",nocase; classtype:attempted-recon; sid:200005600; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/thenewstartpage2021",nocase; classtype:attempted-recon; sid:200005601; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uiora",nocase; classtype:attempted-recon; sid:200005602; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/update-allreadypage",nocase; classtype:attempted-recon; sid:200005603; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updatesecure",nocase; classtype:attempted-recon; sid:200005604; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updatingnewpage",nocase; classtype:attempted-recon; sid:200005605; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/upgrade-bt/home",nocase; classtype:attempted-recon; sid:200005606; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/utututttu/home",nocase; classtype:attempted-recon; sid:200005607; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/v-ob/accueil",nocase; classtype:attempted-recon; sid:200005608; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/venmo-loginusa/",nocase; classtype:attempted-recon; sid:200005609; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vfbjf/btconnect",nocase; classtype:attempted-recon; sid:200005610; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/view-bt-bills-gjrhyrkegr/bt",nocase; classtype:attempted-recon; sid:200005611; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/viewyournewbill/bt-business-btconnect",nocase; classtype:attempted-recon; sid:200005612; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vjsdhdfidjasi/btconnect",nocase; classtype:attempted-recon; sid:200005613; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vosmes/accueil",nocase; classtype:attempted-recon; sid:200005614; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/walletliveconnect/home",nocase; classtype:attempted-recon; sid:200005615; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webespaceclient-ref8/accueil",nocase; classtype:attempted-recon; sid:200005616; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xcccjcdhasks/btconnect",nocase; classtype:attempted-recon; sid:200005617; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xmicrosoftoficew/home",nocase; classtype:attempted-recon; sid:200005618; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xvhfefef/bt-business",nocase; classtype:attempted-recon; sid:200005619; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yah000/home",nocase; classtype:attempted-recon; sid:200005620; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahooend/yahoo",nocase; classtype:attempted-recon; sid:200005621; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoolip/yahoo",nocase; classtype:attempted-recon; sid:200005622; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailingdesk/yahoo-com",nocase; classtype:attempted-recon; sid:200005623; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoosbcglobalattbellso/yahoo-http",nocase; classtype:attempted-recon; sid:200005624; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahooscott/yahoo",nocase; classtype:attempted-recon; sid:200005625; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yourbillnotification/home",nocase; classtype:attempted-recon; sid:200005626; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yt89ougjio/bt",nocase; classtype:attempted-recon; sid:200005627; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ztt5zazu/home",nocase; classtype:attempted-recon; sid:200005628; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skymavis-roninwallet.com",nocase; http_uri; content:"/descarga",nocase; classtype:attempted-recon; sid:200005629; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solatresont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005630; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufatanse.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005631; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufsont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005632; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steinercoza-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/mandyb_steiner_co_za/exxq1passetnrojoe83fzboboxufoggwb7uvmyfqbionla?e=4:su8jhq&\;at=9",nocase; classtype:attempted-recon; sid:200005633; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stolizaparketa.ru",nocase; http_uri; content:"/wp-content/themes/twentyfifteen/css/read/chinavali/index.php?email=jsmith@imaphost.com",nocase; classtype:attempted-recon; sid:200005634; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman2.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005635; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/acc03lzzl4m3izm03iauserpowa.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005636; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/algebraic-pact-316913.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200005637; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/anaagc040gdyacgd0dyuser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005638; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#jr@legalshield.com",nocase; classtype:attempted-recon; sid:200005639; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#paul@legalshield.com",nocase; classtype:attempted-recon; sid:200005640; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/clientid4dunptjlryzrift3nrlomi160gqntzgznajujcnbszq8w/index.htm",nocase; classtype:attempted-recon; sid:200005641; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/dhngw6p6rwrwnuv6vnuse.appspot.com/index.html#brianvillacarlos@legalshieldcorp.com",nocase; classtype:attempted-recon; sid:200005642; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/g58t3e588ddgmdeddauth.appspot.com/index.html#jim-shelvy@legalshield.com",nocase; classtype:attempted-recon; sid:200005643; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/gu1r0utjruhjkukrxhauser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005644; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/oscman2.html#cert@soc.tdc.dk",nocase; classtype:attempted-recon; sid:200005645; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/pdflmanco.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005646; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/zdewaman.html#example@example.com",nocase; classtype:attempted-recon; sid:200005647; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200005648; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#t.voit@legalshield.com",nocase; classtype:attempted-recon; sid:200005649; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/",nocase; classtype:attempted-recon; sid:200005650; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/index.html#martin.manasek@ruk.cuni.cz",nocase; classtype:attempted-recon; sid:200005651; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/index.html#a@b.com",nocase; classtype:attempted-recon; sid:200005652; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/kayindex.html#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200005653; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myowngeneral.html#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200005654; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/newmineindex.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005655; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/owuddqd9dqqdddq9qd0caerq.appspot.com/index.html#stevewilliamson@legalshield.com",nocase; classtype:attempted-recon; sid:200005656; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/projerroro0h5j5ro0jrrj.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005657; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200005658; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005659; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/rrdar99rt9qraraq99euser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005660; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/s0pts0apttxpp00atarrauth.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200005661; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/fcocnew.html",nocase; classtype:attempted-recon; sid:200005662; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/nvhdjgtpl8txagtoccpyscuekxctc7j3kpg5bbugwqv0kemeas313lqehufuifcl6el9vtvomhrfbjbpxbg6qrnsg5sz3dyaiqor%2c%2520ffx6khej2lavfftroaizcq99hjdn3f4hs6gdeg2qodfyhobl8zonx6lez2dafyafc6spylufytfvuzn1jsioh4u6xpsbsqxqgh.html#icann@tecnocratica.net",nocase; classtype:attempted-recon; sid:200005663; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/sydlasgendomain.html#winnie@soupro.com",nocase; classtype:attempted-recon; sid:200005664; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/user517497679326978.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200005665; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/uth0uax3t3uh30ttna0nnuser.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200005666; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/yyw77ywnn68weyew6euserq.appspot.com/index.html#rosalefua@legalshield.com",nocase; classtype:attempted-recon; sid:200005667; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/03a6c481bbd83f8/df225c198d58561#un/68425_md/2/16247/3955/23/19171",nocase; classtype:attempted-recon; sid:200005668; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/1827435283/1827435283.html",nocase; classtype:attempted-recon; sid:200005669; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/abuabomvnediarrfgxamrtqcoehnpskugrmafutqnhugsbzossviqfv/cli123.html",nocase; classtype:attempted-recon; sid:200005670; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/acwuwxxomzzlrrfuyssheahvokqfunqvlbjnjrbyfsmbbmdppwimvbd/cli123.html",nocase; classtype:attempted-recon; sid:200005671; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bbss-urltest-public/docomo_20210726_01.html",nocase; classtype:attempted-recon; sid:200005672; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bbss-urltest-public/docomo_20210910_01.html",nocase; classtype:attempted-recon; sid:200005673; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xdaysonde1.html",nocase; classtype:attempted-recon; sid:200005674; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xdragon1.html",nocase; classtype:attempted-recon; sid:200005675; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xgmx1.html",nocase; classtype:attempted-recon; sid:200005676; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xiphoneswiss1.html",nocase; classtype:attempted-recon; sid:200005677; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xketode1.html",nocase; classtype:attempted-recon; sid:200005678; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xlena1.html",nocase; classtype:attempted-recon; sid:200005679; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xps5de1.html",nocase; classtype:attempted-recon; sid:200005680; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xspar1.html",nocase; classtype:attempted-recon; sid:200005681; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/document-check/sign.html",nocase; classtype:attempted-recon; sid:200005682; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#cl/13669_md/1/788/1401/22/1025434",nocase; classtype:attempted-recon; sid:200005683; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#cl/13695_md/1/788/1401/109/376564",nocase; classtype:attempted-recon; sid:200005684; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#un/13664_md/1/455/1401/112/814109",nocase; classtype:attempted-recon; sid:200005685; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#un/13695_md/1/788/1401/25/339407",nocase; classtype:attempted-recon; sid:200005686; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/srvrs-quarantine-update.appspot.com/index.html?email=",nocase; classtype:attempted-recon; sid:200005687; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/sstoragert/linkqs.html#cl/19939_md/1/4441/3808/112/984664",nocase; classtype:attempted-recon; sid:200005688; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/sstoragert/linkqs.html#un/19995_md/1/4542/3682/112/984664",nocase; classtype:attempted-recon; sid:200005689; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suivi-coupon-recharge.blogspot.com",nocase; http_uri; content:"/p/authentifier-transcash.html",nocase; classtype:attempted-recon; sid:200005690; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; http_uri; content:"/usroutput/themeset1_2021-12-15-15-18-40/",nocase; classtype:attempted-recon; sid:200005691; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; http_uri; content:"/usroutput/themeset1_2021-12-21-23-15-13/",nocase; classtype:attempted-recon; sid:200005692; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; http_uri; content:"/usroutput/themeset1_2021-12-30-00-51-45/",nocase; classtype:attempted-recon; sid:200005693; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; http_uri; content:"/usroutput/themeset1_2022-01-19-02-25-20/",nocase; classtype:attempted-recon; sid:200005694; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; http_uri; content:"/usroutput/themeset1_2022-01-24-15-44-12/",nocase; classtype:attempted-recon; sid:200005695; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"superpark-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/adrian_ramos_superpark_com_hk/_layouts/15/wopiframe.aspx?guestaccesstoken=vofjngnui%2fslbameorlq62qlg8mcdnpo1dizu6i%2bc1m%3d&\;docid=1_124bbb2f682ca4c7daba6cec6ee34dfb9&\;wdformid=%7ba85c8abe%2d68be%2d43dd%2d91f3%2db397386186be%7d&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200005696; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/bfrwi?confirmation",nocase; classtype:attempted-recon; sid:200005697; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/bfsaz?confirmation",nocase; classtype:attempted-recon; sid:200005698; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/608bca7586919c70a2066ef7",nocase; classtype:attempted-recon; sid:200005699; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisscoat.com.cn",nocase; http_uri; content:"/index.html",nocase; classtype:attempted-recon; sid:200005700; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swot.co.in",nocase; http_uri; content:"/.exd/.css/.ess/mtpd/valid.php",nocase; classtype:attempted-recon; sid:200005701; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synapse-project.com",nocase; http_uri; content:"/about-us/netflix/9001ca429212011f4a4fda6c778cc318/account",nocase; classtype:attempted-recon; sid:200005702; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synapse-project.com",nocase; http_uri; content:"/about-us/netflix/9001ca429212011f4a4fda6c778cc318/account/",nocase; classtype:attempted-recon; sid:200005703; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synmultiwallet.com",nocase; http_uri; content:"/public/dapp",nocase; classtype:attempted-recon; sid:200005704; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/0gukxxlez2?signature=newsletter&\;trackingid=cipfmsuacky99zi4ywdh9pf0awhehzze",nocase; classtype:attempted-recon; sid:200005705; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/3vbfxu0jiq",nocase; classtype:attempted-recon; sid:200005706; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/8mptsau4zq?amp=1",nocase; classtype:attempted-recon; sid:200005707; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/cibyybn8hn",nocase; classtype:attempted-recon; sid:200005708; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/fy2lasfqae?trackingid=x4mf7rup&signature=newsletter",nocase; classtype:attempted-recon; sid:200005709; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/ge6k1ctsmd?trackingid=3pc2vgmn&signature=newsletter",nocase; classtype:attempted-recon; sid:200005710; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/ge6k1ctsmd?trackingid=n13hzxpy&signature=newsletter",nocase; classtype:attempted-recon; sid:200005711; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/ge6k1ctsmd?trackingid=ocfgjhka&signature=newsletter",nocase; classtype:attempted-recon; sid:200005712; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/ge6k1ctsmd?trackingid=ohj6ctus&signature=newsletter",nocase; classtype:attempted-recon; sid:200005713; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/jcyrtlrlqf?trackingid=8jx7hant&signature=newsletter",nocase; classtype:attempted-recon; sid:200005714; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/jcyrtlrlqf?trackingid=cp7bneii&signature=newsletter",nocase; classtype:attempted-recon; sid:200005715; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/jcyrtlrlqf?trackingid=ukas7fog&signature=newsletter",nocase; classtype:attempted-recon; sid:200005716; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/rbigkru7jm?signature=newsletter&\;trackingid=vxso5gihmardnqp2tm9z0z5scpzchmzb",nocase; classtype:attempted-recon; sid:200005717; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/zrd6j5rq4u?amp=1",nocase; classtype:attempted-recon; sid:200005718; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecsuport.com.br",nocase; http_uri; content:"/files/system32/procesosdeseguridadhb/170.51.165.16679791/agregar/telefono/contacto/logonoperacionservlet.html",nocase; classtype:attempted-recon; sid:200005719; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telenorkandklimsupoort.blogspot.com",nocase; http_uri; content:"/2021/03/blog-post_48.html",nocase; classtype:attempted-recon; sid:200005720; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"temporary-url.com",nocase; http_uri; content:"/iframe.php?url=https://gasdealers.in/goprime/index.html",nocase; classtype:attempted-recon; sid:200005721; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedigirocket.com",nocase; http_uri; content:"/wp-content/plugins/form.htm",nocase; classtype:attempted-recon; sid:200005722; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thelibrarysamui.com",nocase; http_uri; content:"/wp-content/uploads/2021/11/1/1and1/index.php",nocase; classtype:attempted-recon; sid:200005723; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/48rzxpne",nocase; classtype:attempted-recon; sid:200005724; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/bde7h9ut",nocase; classtype:attempted-recon; sid:200005725; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/btinternet56",nocase; classtype:attempted-recon; sid:200005726; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/evyu688y",nocase; classtype:attempted-recon; sid:200005727; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/glsino",nocase; classtype:attempted-recon; sid:200005728; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/nycgovtgrant",nocase; classtype:attempted-recon; sid:200005729; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yxb48kqj",nocase; classtype:attempted-recon; sid:200005730; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yxry9vf5",nocase; classtype:attempted-recon; sid:200005731; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yyvm8qr5",nocase; classtype:attempted-recon; sid:200005732; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topearnersafrica.com",nocase; http_uri; content:"/truist.com/",nocase; classtype:attempted-recon; sid:200005733; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tr.cloudmagic.com",nocase; http_uri; content:"/h/v6/link-track/1.0/1612678003989072-e5f6d8cc-499b-ea4f-85f1-8b23ad935661/1612677988/2f5895837f8d3f0a667c6b92ad41f652/8af273ac431e289838c8bf7c490185f3/3fe2530ffaa60580b73b9eec6af02f4d?redirect_uri=http://amazon.com",nocase; classtype:attempted-recon; sid:200005734; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tr.cloudmagic.com",nocase; http_uri; content:"/h/v6/link-track/1.0/1614590779401122-8e06125c-4b23-d643-3068-601cab9bec04/1614590763/2f5895837f8d3f0a667c6b92ad41f652/31367888a66bf6f98973a200c83075bb/3fe2530ffaa60580b73b9eec6af02f4d?redirect_uri=http://amazon.com",nocase; classtype:attempted-recon; sid:200005735; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track.adform.net",nocase; http_uri; content:"/c/?bn=35405429\;cpdir=https://tmmny.csb.app/.wewrewew.ahr0chm6ly9pbnzlc3rpbmdpbmdvzc5vcmcvqvbjmjq3.yw1izxiuzml0dg9uqhnwyxjrlmnvlm56",nocase; classtype:attempted-recon; sid:200005736; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transcash-fr-v.blogspot.com",nocase; http_uri; content:"/?m=1",nocase; classtype:attempted-recon; sid:200005737; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribratanewsbondowoso.com",nocase; http_uri; content:"/webapp/tribratanews/public/js/hughesnet.com/index.php",nocase; classtype:attempted-recon; sid:200005738; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/unrpgg",nocase; classtype:attempted-recon; sid:200005739; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucmo0-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/jmlee_ucmo_edu/ey4vifgt_7nfmz9xrsc5lpcbyiu2dkrhyz1vcu3pcml_la?e=4%3advzg7b&\;at=9",nocase; classtype:attempted-recon; sid:200005740; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umeacademy.com",nocase; http_uri; content:"/wine",nocase; classtype:attempted-recon; sid:200005741; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniga.ac.id",nocase; http_uri; content:"/wptracking/tracking2/tracking/tracking.php",nocase; classtype:attempted-recon; sid:200005742; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c124/login.php",nocase; classtype:attempted-recon; sid:200005743; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c155/login.php",nocase; classtype:attempted-recon; sid:200005744; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c214/login.php",nocase; classtype:attempted-recon; sid:200005745; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c224/login.php",nocase; classtype:attempted-recon; sid:200005746; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c266/login.php",nocase; classtype:attempted-recon; sid:200005747; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c281/login.php",nocase; classtype:attempted-recon; sid:200005748; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c282/login.php",nocase; classtype:attempted-recon; sid:200005749; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c299/login.php",nocase; classtype:attempted-recon; sid:200005750; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c479/login.php",nocase; classtype:attempted-recon; sid:200005751; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c517/login.php",nocase; classtype:attempted-recon; sid:200005752; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c521/login.php",nocase; classtype:attempted-recon; sid:200005753; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c527/login.php",nocase; classtype:attempted-recon; sid:200005754; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c535/login.php",nocase; classtype:attempted-recon; sid:200005755; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c578/login.php",nocase; classtype:attempted-recon; sid:200005756; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c687/login.php",nocase; classtype:attempted-recon; sid:200005757; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c812/login.php",nocase; classtype:attempted-recon; sid:200005758; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c839/login.php",nocase; classtype:attempted-recon; sid:200005759; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c854/login.php",nocase; classtype:attempted-recon; sid:200005760; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c862/login.php",nocase; classtype:attempted-recon; sid:200005761; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c986/login.php",nocase; classtype:attempted-recon; sid:200005762; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitus.mk.ua",nocase; http_uri; content:"/sites/default/files/ctools/ams/cms/index/www/customer_center/customer-idpp00c997/login.php",nocase; classtype:attempted-recon; sid:200005763; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uploads.codesandbox.io",nocase; http_uri; content:"/uploads/user/05f89058-061c-48b2-856d-a88922dc294e/5r8g-index.html",nocase; classtype:attempted-recon; sid:200005764; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.com",nocase; http_uri; content:"/jeotzt",nocase; classtype:attempted-recon; sid:200005765; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.gratis",nocase; http_uri; content:"/0lxgmv",nocase; classtype:attempted-recon; sid:200005766; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"users.tpg.com.au",nocase; http_uri; content:"/kcornwall/email-verification/notice/account_login/login.html#accounting@utu.fi",nocase; classtype:attempted-recon; sid:200005767; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/yogs",nocase; classtype:attempted-recon; sid:200005768; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"velvet.by",nocase; http_uri; content:"/drupal-7.56/scripts/bp",nocase; classtype:attempted-recon; sid:200005769; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"velvet.by",nocase; http_uri; content:"/drupal-7.56/scripts/bp/",nocase; classtype:attempted-recon; sid:200005770; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vetrfedsonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005771; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viamobte.blogspot.com",nocase; http_uri; content:"/2021/03/blog-post.html",nocase; classtype:attempted-recon; sid:200005772; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view.genial.ly",nocase; http_uri; content:"/61ee94a7d41b3e00122f8eae/interactive-content-secured-document",nocase; classtype:attempted-recon; sid:200005773; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view.genial.ly",nocase; http_uri; content:"/61ee94a7d41b3e00122f8eae/interactive-content-untitled-genially",nocase; classtype:attempted-recon; sid:200005774; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivaterouna.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005775; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?cc_key=&\;post=%7brandom_number_5%7d_1&\;to=http://18.118.206.123/index.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d",nocase; classtype:attempted-recon; sid:200005776; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=1qg10",nocase; classtype:attempted-recon; sid:200005777; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=3efeh",nocase; classtype:attempted-recon; sid:200005778; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=cylqz",nocase; classtype:attempted-recon; sid:200005779; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=dmyfj",nocase; classtype:attempted-recon; sid:200005780; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=dvexh",nocase; classtype:attempted-recon; sid:200005781; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=fhqja",nocase; classtype:attempted-recon; sid:200005782; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=g9dzz",nocase; classtype:attempted-recon; sid:200005783; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=qq74g",nocase; classtype:attempted-recon; sid:200005784; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=v0de0,email=kflove23@icloud.com&post=11981_1&cc_key",nocase; classtype:attempted-recon; sid:200005785; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=zzbtj",nocase; classtype:attempted-recon; sid:200005786; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=ccugr",nocase; classtype:attempted-recon; sid:200005787; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=mb1wu",nocase; classtype:attempted-recon; sid:200005788; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=meixj",nocase; classtype:attempted-recon; sid:200005789; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=toboe",nocase; classtype:attempted-recon; sid:200005790; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=tyzud",nocase; classtype:attempted-recon; sid:200005791; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=u7tfm,email=resurgita@icloud.com&post=35252_1&cc_key",nocase; classtype:attempted-recon; sid:200005792; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=v5t6m,email=robertgoby@icloud.com&post=24927_1&cc_key",nocase; classtype:attempted-recon; sid:200005793; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=vgy1e",nocase; classtype:attempted-recon; sid:200005794; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=znbui",nocase; classtype:attempted-recon; sid:200005795; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fhumanity06.com%2fwp-content%2fthemes%2fapi.html",nocase; classtype:attempted-recon; sid:200005796; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2frois-zkxzx.run.goorm.io/safe-browser/",nocase; classtype:attempted-recon; sid:200005797; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fwww.allovisite.com%2fwp-content%2fplugins%2fapi.html",nocase; classtype:attempted-recon; sid:200005798; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fwww.allovisite.com%2fwp-content%2fplugins%2fapi.html&post=693378694_2&cc_key",nocase; classtype:attempted-recon; sid:200005799; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/hwrgpnzn/tmkmvvztsvg",nocase; classtype:attempted-recon; sid:200005800; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/odmibxru/tsiqjhleqcj",nocase; classtype:attempted-recon; sid:200005801; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fsapphireinternationalschool.com%2falbum%2fimages%2fsound%2faudio&post=690576696_17&cc_key=/lhgesiqipz/ksbqekez2fa",nocase; classtype:attempted-recon; sid:200005802; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://arroketainsificansion.com/r/cairdiembos",nocase; classtype:attempted-recon; sid:200005803; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://drmustafaalagamy.com/css/rajahutandil2",nocase; classtype:attempted-recon; sid:200005804; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://laprospergroup.com/wp-admin/assets/?key=8oyrd,email={email}",nocase; classtype:attempted-recon; sid:200005805; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://product365.review/wp-content/uploads/sad.html?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key",nocase; classtype:attempted-recon; sid:200005806; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://qrco.de/bcj1ds?trackingid=yb67qps5&signature=newsletter",nocase; classtype:attempted-recon; sid:200005807; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rendelparis.com/wp-admin/assets?key=isvbt,email={email}",nocase; classtype:attempted-recon; sid:200005808; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://sahara-distribution.com/wp-admin/dir",nocase; classtype:attempted-recon; sid:200005809; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.marmum.ae/css/?key=ibxa",nocase; classtype:attempted-recon; sid:200005810; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.marmum.ae/css/?key=ksor",nocase; classtype:attempted-recon; sid:200005811; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.marmum.ae/css/?key=lzqm",nocase; classtype:attempted-recon; sid:200005812; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.marmum.ae/css/?key=yihv",nocase; classtype:attempted-recon; sid:200005813; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.newlifenursery.com/assets/rdt.html?key=lwhi1",nocase; classtype:attempted-recon; sid:200005814; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vzn-etfd.000webhostapp.com",nocase; http_uri; content:"/at_id/?home=https://att.com/my",nocase; classtype:attempted-recon; sid:200005815; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallieget.com",nocase; http_uri; content:"/8jdu/sb6/index.php?_&\;_",nocase; classtype:attempted-recon; sid:200005816; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallieget.com",nocase; http_uri; content:"/8jdu/sb6/index.php?_&\;_&\;_",nocase; classtype:attempted-recon; sid:200005817; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waqassupplies.com",nocase; http_uri; content:"/admin/api.html",nocase; classtype:attempted-recon; sid:200005818; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waqassupplies.com",nocase; http_uri; content:"/image/catalog/xxx.html",nocase; classtype:attempted-recon; sid:200005819; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warriorplus.com",nocase; http_uri; content:"/o2/a/f5s4y/0",nocase; classtype:attempted-recon; sid:200005820; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.serviceunit.co.uk",nocase; http_uri; content:"/upgrade/",nocase; classtype:attempted-recon; sid:200005821; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webuyworkshopequipment.com",nocase; http_uri; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d",nocase; classtype:attempted-recon; sid:200005822; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webuyworkshopequipment.com",nocase; http_uri; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d/",nocase; classtype:attempted-recon; sid:200005823; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wetransfer.com",nocase; http_uri; content:"/downloads/012117f548f94e0569d641e5f53686ea20220122151651/07af76fa073e33cf56d22793a19272a020220122151654/e35b77",nocase; classtype:attempted-recon; sid:200005824; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wewillblockyourpagepleaseverifyyouraccount.co.vu",nocase; http_uri; content:"/ctres.php",nocase; classtype:attempted-recon; sid:200005825; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"williamreinhart.com",nocase; http_uri; content:"/zvzv/#26178656c2e77756c6666406c6966656c656e7a2e636f6d",nocase; classtype:attempted-recon; sid:200005826; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_home",nocase; classtype:attempted-recon; sid:200005827; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_internet",nocase; classtype:attempted-recon; sid:200005828; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_service_alert.",nocase; classtype:attempted-recon; sid:200005829; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_teem",nocase; classtype:attempted-recon; sid:200005830; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_update",nocase; classtype:attempted-recon; sid:200005831; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_upgrade",nocase; classtype:attempted-recon; sid:200005832; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@btinternet",nocase; classtype:attempted-recon; sid:200005833; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvk12-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/pklewis_k12_wv_us/_layouts/15/wopiframe.aspx?guestaccesstoken=tqintdtuii%2bam%2fbqmtnjkenggs2dptoi8hs2jqftjkq%3d&docid=1_1446052cffa4c4871bd24bb98fe86ed6d&wdformid=%7bdf30d25d%2d0b59%2d47e5%2d956e%2dc601397ea4d7%7d&action=formsubmit&cid=57cdb8ab-426b-4eff-a51f-903ee3684f96",nocase; classtype:attempted-recon; sid:200005834; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvk12-my.sharepoint.com",nocase; http_uri; content:"/personal/pklewis_k12_wv_us/_layouts/15/wopiframe.aspx?guestaccesstoken=tqintdtuii%2bam%2fbqmtnjkenggs2dptoi8hs2jqftjkq%3d&docid=1_1446052cffa4c4871bd24bb98fe86ed6d&wdformid=%7bdf30d25d%2d0b59%2d47e5%2d956e%2dc601397ea4d7%7d&action=formsubmit&cid=57cdb8ab-426b-4eff-a51f-903ee3684f96",nocase; classtype:attempted-recon; sid:200005835; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yaxnnawa.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200005836; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/kms8u47zlxwk",nocase; classtype:attempted-recon; sid:200005837; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/mxvzwlcdizyq",nocase; classtype:attempted-recon; sid:200005838; rev:1;)
|
|
|
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/nckeqquhrpuf",nocase; classtype:attempted-recon; sid:200005839; rev:1;)
|
